7.5
High
CVE-2025-2900 IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0…
Description
IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Semeru Runtime 21.0 | 21.0.0.0 → 21.0.6.0 | No fix stated |
| Semeru Runtime 17.0 | 17.0.0.0 → 17.0.14.0 | No fix stated |
| Semeru Runtime 11.0 | 11.0.12.0 → 11.0.26.0 | No fix stated |
| Semeru Runtime 8.0 | 8.0.302.0 → 8.0.442.0 | No fix stated |