← Back

CVE-2026-6928

nvd nist
Published: Sep 23, 2026Modified: Sep 29, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

Affected (1)

Products: Ibm: Concert
Ibm
1 product
Concert
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Concert
1.0.0 ≤ version ≤ 3.0.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.