CVE-2012-4420

CVE-2012-4420 is an information disclosure vulnerability affecting the OpenJDK 7 implementation of Java SE 7. It stems from the JVM incorrectly initializing integer arrays with non-zero elements after memory allocation, potentially allowing a remote attacker to obtain sensitive information. With a CVSS score of 7.5 (High), this flaw has a low attack complexity and no user interaction required, leading to a high impact on confidentiality. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.