{"id":"CVE-2025-33132","state":"PUBLISHED","title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","description":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.","publishedAt":"2025-10-27T23:57:12.201Z","updatedAt":"2025-10-28T13:53:31.618Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM DB2 High Performance Unload"],"affected":[{"vendor":"IBM","product":"DB2 High Performance Unload","defaultStatus":"unaffected","versions":[{"version":"6.1.0.3","status":"affected"},{"version":"5.1.0.1","status":"affected"},{"version":"6.1.0.2","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.5.0.0 IF1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1","status":"affected"},{"version":"5.1","status":"affected"}],"cpes":["cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:interm_fix1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:if1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7249336"],"weaknesses":["CWE-467"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/33xxx/CVE-2025-33132.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-33132","state":"PUBLISHED","datePublished":"2025-10-27T23:57:12.201Z","dateUpdated":"2025-10-28T13:53:31.618Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2025-04-15T17:51:11.506Z"},"containers":{"cna":{"title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","descriptions":[{"lang":"en","value":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to."}],"affected":[{"vendor":"IBM","product":"DB2 High Performance Unload","defaultStatus":"unaffected","versions":[{"version":"6.1.0.3","status":"affected"},{"version":"5.1.0.1","status":"affected"},{"version":"6.1.0.2","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.5.0.0 IF1","status":"affected"},{"version":"6.1.0.1","status":"affected"},{"version":"6.1","status":"affected"},{"version":"5.1","status":"affected"}],"cpes":["cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:interm_fix1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:if1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7249336","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-467","description":"CWE-467 Use of sizeof() on a Pointer Type","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2025-10-27T23:57:12.201Z"},"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central</p>"}],"value":"Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"ibm-cvegen"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-28T13:53:17.971219Z","id":"CVE-2025-33132","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-28T13:53:31.618Z"}}]}}}