Search: CVE-2025-55118

CVE-2025-55118 is a high-severity heap-based buffer overflow vulnerability in BMC Control-M/Agent versions 9.0.18 through 9.0.22. It occurs when SSL/TLS communication is configured with specific non-default settings, allowing remote attackers to trigger memory corruption without authentication or user interaction. The vulnerability can lead to significant impacts on confidentiality, integrity, and availability of affected systems. Exploitation requires network access but no privileges, making it a critical concern for organizations using these versions with the specified configurations. No known exploits are currently in the wild, but the high CVSS score (8.4) indicates a serious risk.