{"id":56254,"date":"2025-07-01T05:48:29","date_gmt":"2025-07-01T05:48:29","guid":{"rendered":""},"modified":"2025-09-03T08:11:20","modified_gmt":"2025-09-03T14:11:20","slug":"cve-2025-36004-unqualified-library-call-vulnerability-in-ibm-i-facsimile-support","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-36004-unqualified-library-call-vulnerability-in-ibm-i-facsimile-support\/","title":{"rendered":"CVE-2025-36004: Unqualified Library Call Vulnerability in IBM i Facsimile Support<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity landscape continually grapples with newly discovered vulnerabilities, one of which is CVE-2025-36004. This particular vulnerability pertains to IBM i versions 7.2, 7.3, 7.4, and 7.5. It’s a serious issue that potentially allows a user to gain elevated privileges due to an unqualified library call<\/a> in IBM Facsimile Support for i. This vulnerability matters because a malicious actor could exploit it to run user-controlled code with administrator privileges, potentially leading<\/a> to system compromise or data leakage. Both IBM i users and administrators need to be aware of this vulnerability<\/a> and take the necessary steps to mitigate its risks.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-36004
\nSeverity: High (8.8 CVSS Score)
\nAttack Vector: Local
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n