{"id":"CVE-2025-33126","state":"PUBLISHED","title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","description":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.","publishedAt":"2025-10-27T23:56:06.271Z","updatedAt":"2025-10-28T14:02:57.632Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM DB2 High Performance Unload"],"affected":[{"vendor":"IBM","product":"DB2 High Performance Unload","defaultStatus":"unaffected","versions":[{"version":"6.1.0.3","status":"affected"},{"version":"5.1.0.1","status":"affected"},{"version":"6.1.0.2","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.5.0.0 IF1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1","status":"affected"},{"version":"5.1","status":"affected"}],"cpes":["cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:interm_fix1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:if1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7249336"],"weaknesses":["CWE-131"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/33xxx/CVE-2025-33126.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-33126","state":"PUBLISHED","datePublished":"2025-10-27T23:56:06.271Z","dateUpdated":"2025-10-28T14:02:57.632Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2025-04-15T17:51:11.505Z"},"containers":{"cna":{"title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","descriptions":[{"lang":"en","value":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size."}],"affected":[{"vendor":"IBM","product":"DB2 High Performance Unload","defaultStatus":"unaffected","versions":[{"version":"6.1.0.3","status":"affected"},{"version":"5.1.0.1","status":"affected"},{"version":"6.1.0.2","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.5.0.0 IF1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1","status":"affected"},{"version":"5.1","status":"affected"}],"cpes":["cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:interm_fix1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:if1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7249336","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-131","description":"CWE-131 Incorrect Calculation of Buffer Size","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2025-10-27T23:56:06.271Z"},"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central</p>"}],"value":"Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"ibm-cvegen"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-28T13:59:27.560019Z","id":"CVE-2025-33126","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-28T14:02:57.632Z"}}]}}}