CVE-2025-12771 HIGH

CVE-2025-12771: IBM Concert Software Improper Restriction of Operations within the Bounds of a Memory Buffer.

Vendor Ibm

Product Concert

Weakness CWE-119

Published December 26, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

Key dates

02Disclosure timeline

December 26, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-12771 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/119.html