← Back

CVE-2025-33131

nvd nist
Published: Oct 28, 2025Modified: Nov 6, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.

Affected (6)

Ibm
1 product
Db2 High Performance Unload Load
Configuration A
6 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Ibm
Db2 High Performance Unload Load
From 5.1.0.0 to 6.1.0.0
Db2 High Performance Unload Load
Version 6.1.0.1
Db2 High Performance Unload Load
Version 6.1.0.2
Db2 High Performance Unload Load
Version 6.1.0.3
Db2 High Performance Unload Load
Version 6.5.0.0
Db2 High Performance Unload Load
Version 6.5.0.0 if1
Running on/withPlatform Versions
Ibm
Aix
All versions
Ibm
Linux On Ibm Z
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.