CVEvulnerability

CVE-2025-2900

7.5 HIGH Published 2025-05-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-122, CWE-787

Description

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.

Affected configurations

• ibm semeru runtime (>= 8.0.302.0 <= 8.0.442.0) • ibm semeru runtime (>= 11.0.12.0 <= 11.026.0) • ibm semeru runtime (>= 17.0.0.0 <= 17.0.14.0) • ibm semeru runtime (>= 21.0.0.0 <= 21.0.6.0)

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References