CVE-2025-33126: Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.
Other sources
IBM Db2 High Performance Unload could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 High Performance Unloadto a version that resolves this vulnerability.Fixed in 12.1.0.0.1Patch Interim Fix 12.1.0.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33126?
CVE-2025-33126 is rated as a high severity vulnerability affecting multiple versions of IBM DB2 High Performance Unload.
How do I fix CVE-2025-33126?
To fix CVE-2025-33126, you should update IBM DB2 High Performance Unload to the latest patched version provided by IBM.
Which versions are affected by CVE-2025-33126?
CVE-2025-33126 impacts IBM DB2 High Performance Unload versions 5.1, 6.1, and 6.5, including multiple specific subversions.
What type of vulnerability is CVE-2025-33126?
CVE-2025-33126 is a vulnerability that enables potential data exposure or unauthorized access in IBM DB2 High Performance Unload.
Is there an exploit available for CVE-2025-33126?
As of now, there are reports indicating the potential for exploitation of CVE-2025-33126, warranting immediate remediation.