A vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affects multiple supported versions. The flaw resides in the Hotspot component and allows a remote unauthenticated attacker with network access via multiple protocols to gain unauthorized read and write access to some accessible data. The vulnerability can be exploited through APIs, including via web services supplying data to these APIs, and also affects sandboxed Java Web Start applications or applets running untrusted code. The CVSS 3.1 base score is 4.8, indicating a medium severity impact on confidentiality and integrity. Oracle has released patches as part of its October 2024 Critical Patch Update and strongly recommends applying these updates promptly.