Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

IBM Rhapsody Stack Overflow Risk: Malicious Code Execution

CVE-2025-33076 · published 1 year ago
Summary

IBM Rhapsody versions 9.0.2, 10.0, and 10.0.1 have a security flaw that could allow an attacker to execute unauthorized code on a local system. This could happen if a malicious user takes advantage of the flaw. To protect your system, update to a fixed version of IBM Rhapsody.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm engineering_systems_design_rhapsody 9.0.2
10.0
10.0.1
cpe:2.3:a:ibm:engineering_systems_design_rhapsody:9.0.2:*:*:*:*:*:*:*
Original advisory text
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execut...
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published23 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-33076 · NVD
Track software like this
Free during beta