Description
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Concert | 1.0.0 – ≤ 3.0.0 | — |
Advisories 1
- WID-SEC-2026-3513 IBM Concert: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 24, 2026
References
- https://www.ibm.com/support/pages/node/7288830 vendor-advisory patch