CVE-2025-64646

IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.

Score

CVSS 3.1 6.2 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-03-25

Last modified

2026-03-26

Weaknesses

CWE-14

Affected products

• Concert (Ibm)

References

• https://www.ibm.com/support/pages/node/7267105