Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-1721 EUVD-2025-205434GHSA-mrrq-9gcx-wv49

BM Concert Software Improper Clearing of Heap Memory Before Release.

Published Dec 26, 2025 · Updated Dec 26, 2025 · Assigned by ibm

Description

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

Affected products

VendorProductAffectedFixed
IBM Concert 1.0.0 – ≤ 2.1.0 —

References