|CVSS SCORE||9.3, (AV:N/AC:M/Au:N/C:C/I:C/A:C)|
The specific flaw exists within the java.util.concurrent.ConcurrentHashMap class. The issue lies in segmentShift and segmentMask fields which can be used to manipulate memory outside of the allocated buffer. An attacker can leverage this vulnerability to execute code under the context of the current user.
Oracle has issued an update to correct this vulnerability. More details can be found at: