CVE-2025-30754

Source
https://cve.org/CVERecord?id=CVE-2025-30754
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-30754.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-30754
Aliases
Downstream
BELL (1)
CGA (62)
CLEANSTART (1)
CLSA (15)
DEBIAN (1)
MGASA (1)
MINI (17)
OESA (4)
openSUSE (7)
RHSA (7)
RLSA (3)
SUSE (9)
UBUNTU (1)
Related
Published
2025-07-15T19:27:30Z
Modified
2026-07-17T21:02:36Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details
Database specific
{
    "cna_assigner":  "oracle",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30754.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "last_affected":  "8u451"
                },
                {
                    "last_affected":  "8u451-perf"
                },
                {
                    "last_affected":  "11.0.27"
                },
                {
                    "last_affected":  "17.0.15"
                },
                {
                    "last_affected":  "21.0.7"
                },
                {
                    "last_affected":  "24.0.1"
                },
                {
                    "last_affected":  "17.0.15"
                },
                {
                    "last_affected":  "21.0.7"
                },
                {
                    "last_affected":  "24.0.1"
                },
                {
                    "last_affected":  "21.3.14"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type
GIT
Repo
https://github.com/graalvm/graalvm-ce-builds
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
Database specific
Show details
{
    "cpe":  [
        "cpe:2.3:a:oracle:graalvm_for_jdk:24.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:jre:24.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:oracle:jdk:24.0.1:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "24.0.1"
        }
    ],
    "source":  "CPE_FIELD"
}

Affected versions

graal-23.*
graal-23.0.0
graal-23.0.1
graal-23.0.2
jdk-17.*
jdk-17.0.7
jdk-17.0.8
jdk-17.0.9
jdk-20.*
jdk-20.0.1
jdk-20.0.2
jdk-21.*
jdk-21.0.0
jdk-21.0.1
jdk-21.0.2
jdk-22.*
jdk-22.0.0
jdk-22.0.1
jdk-22.0.2
jdk-23.*
jdk-23.0.0
jdk-23.0.1
jdk-23.0.2
jdk-24.*
jdk-24.0.0
jdk-24.0.1
jdk-24.0.2
jdk-25.*
jdk-25.0.0
jdk-25.0.1
jdk-25.0.2
vm-19.*
vm-19.3.0
vm-19.3.0.2
vm-19.3.1
vm-20.*
vm-20.0.0
vm-20.3.5
vm-20.3.6
vm-21.*
vm-21.3.1
vm-21.3.2
vm-21.3.3
vm-21.3.3.1
vm-22.*
vm-22.0.0.2
vm-22.1.0
vm-22.2.0
vm-22.3.0
vm-22.3.1
vm-22.3.2
vm-22.3.3
vm-ce-21.*
vm-ce-21.2.0
vm-ce-22.*
vm-ce-22.3.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-30754.json"