CVE-2025-36156 — IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to …
Published: 2025-10-07 · CVSS: 7.4 · CVSS 3.1
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7