CVE-2025-1759
18.08.2025, 14:15
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
| Vendor | Product | Version |
|---|---|---|
| ibm | concert | 1.0.0 ≤ 𝑥 < 2.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.
- CWE-212 - Improper Removal of Sensitive Information Before Storage or TransferThe product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.