CVE-2026-10534: IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
Published Aug 7, 2026
·Updated
Db2 is vulnerable to buffer overflow in the IXF IMPORT parser.
Other sources
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
— MITRE
Affected Software
3 affected components
IBM DB2>=11.5.0<=11.5.9, >=12.1.0<=12.1.5
IBM IBM® Db2®<=11.5.0 - 11.5.9
IBM IBM® Db2®<=12.1.0 - 12.1.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 (IXF IMPORT parser)to a version that resolves this vulnerability.Fixed in 12.1.4Patch Security Update #88454 - Upgrade
Upgrade
IBM Db2 (IXF IMPORT parser)to a version that resolves this vulnerability.Fixed in 12.1.5Patch Security Update #88454 - Upgrade
Upgrade
IBM Db2 (IXF IMPORT parser)to a version that resolves this vulnerability.Fixed in 11.5.9Patch Security Update #88454
Event History
Aug 7, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Aug 12, 2026
CVE Published
via MITRE·09:24 PM
Data Sourced
via MITRE·09:24 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness