← Back

CVE-2025-36083

nvd nist
Published: Oct 28, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.

Affected (1)

Products: Ibm: Concert
Ibm
1 product
Concert
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Concert
From 1.0.0 to 2.1.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-244
Improper Clearing of Heap Memory Before Release ('Heap Inspection')
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.