CVE-2025-33126

MEDIUM EPSS 19.6%
Published Oct 28, 20258mo ago · Modified Jun 17, 20262w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Oct 28, 2025 8mo ago
Last Modified Jun 17, 2026 2w ago

Description

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
19.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-131

Affected Products 10

VendorProductVersionRange
ibmdb2_high_performance_unload_load*≥5.1.0.0  –  ≤6.1.0.0
ibmdb2_high_performance_unload_load6.1.0.1any
ibmdb2_high_performance_unload_load6.1.0.2any
ibmdb2_high_performance_unload_load6.1.0.3any
ibmdb2_high_performance_unload_load6.5.0.0any
ibmdb2_high_performance_unload_load6.5.0.0any
ibmaix*any
ibmlinux_on_ibm_z*any
linuxlinux_kernel*any
microsoftwindows*any

References 1

  • ibm.com https://www.ibm.com/support/pages/node/7249336
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.