CVE-2025-12771

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Dec 26, 2025

CISA due date

—

The record

IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

Affected packages

Ecosystem	Package	Introduced	Fixed