CVE-2024-20919 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting specific versions. It involves the Hotspot component and allows an unauthenticated attacker with network access via multiple protocols to potentially modify critical data without impacting confidentiality or availability. Exploitation requires supplying data to APIs without using untrusted Java Web Start applications or applets. The CVSS 3.1 base score is 5.9, indicating medium severity with integrity impact only. Oracle has released patches as part of their January 2024 Critical Patch Update.