CVE-2025-36156 — IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution

CVE-2025-36156

IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution PUBLISHED

Description (CNA)

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system.

Affected (CNA)

Vendor / product	Versions
IBM / InfoSphere Data Replication VSAM for z/OS Remote Source	affected 0 through 11.4

CWE

CWE-119

References

https://www.ibm.com/support/pages/node/7247224

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.