CVE-2025-30698

CVE-2025-30698 is a vulnerability in the 2D component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, affecting multiple versions including Java SE 8u441, 11.0.26, 17.0.14, 21.0.6, and 24. This vulnerability, with a CVSS 3.1 Base Score of 5.6 (Medium), is difficult to exploit but allows an unauthenticated attacker with network access to compromise affected systems. Successful attacks can lead to unauthorized data modification, deletion, read access to a subset of data, and partial denial of service. It primarily impacts client-side Java deployments running untrusted code within a sandbox. The attack vector is network-based, but the attack complexity is high (AC:H), requiring specific conditions for successful exploitation. The potential impact includes low confidentiality, integrity, and availability (C:L, I:L, A:L) of accessible data. This vulnerability does not affect server-side Java deployments running only trusted code. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or active threat intelligence surrounding it.