7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
Basic Information
ID
CVE-2025-12771
Source
ibm
Published
Dec 26, 2025 at 13:01
Modified
Dec 26, 2025 at 14:44
Affected Product
Vendor
IBM
Product
Concert
Version
1.0.0
Affected Versions
IBM Concert 1.0.0