CVE-2024-21145

CVE-2024-21145 is a vulnerability in the 2D component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, affecting multiple versions including Java SE 8u411, 11.0.23, 17.0.11, 21.0.3, and 22.0.1. This vulnerability allows an unauthenticated attacker with network access to achieve unauthorized partial data confidentiality and integrity. While difficult to exploit, successful attacks can lead to unauthorized updates, insertions, deletions, and read access to a subset of accessible data. The CVSS 3.1 Base Score is 4.8 (Medium), indicating a low impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.