Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-12665

IBM MQ Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM MQ Operator

Default version status: unaffected

  • 3.2.0 to ≤ 3.2.29affected
  • 3.3.0 to < 3.4.0affected
  • 3.4.1affected
  • 3.5.0affected
  • 3.5.1 to ≤ 3.5.3affected
  • 3.6.0 to ≤ 3.6.4affected
  • 3.7.0 to ≤ 3.7.2affected
  • 3.8.0affected
  • 3.8.1affected
  • 3.9.0affected
  • 3.9.1affected
  • 3.9.2affected
  • 4.0.0affected
  • 4.0.1affected
  • 4.0.2affected
  • 4.0.3affected
  • 4.0.4affected
  • 2.0.0 to ≤ 2.0.29affected

IBM MQ Advanced container images

Default version status: unaffected

  • 9.4.0.6-r1 to ≤ r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2affected
  • 9.4.0.6-r2affected
  • 9.4.0.7-r1affected
  • 9.4.0.10-r1affected
  • 9.4.0.10-r2affected
  • 9.4.0.11-r1affected
  • 9.4.0.11-r2affected
  • 9.4.0.11-r3affected
  • 9.4.0.12-r1affected
  • 9.4.0.15-r1 to ≤ 9.4.0.15-r4affected
  • 9.4.0.16-r1affected
  • 9.4.0.16-r2affected
  • 9.4.0.17-r1affected
  • 9.4.0.17-r2affected
  • 9.4.0.20-r1affected
  • 9.4.0.21-r1affected
  • 9.4.0.21-r2affected
  • 9.4.0.25-r1 to ≤ 9.4.0.25-r3affected
  • 9.4.0.26-r1affected
  • 9.4.1.0-r1affected
  • 9.4.1.0-r2affected
  • 9.4.1.1-r1affected
  • 9.4.2.0-r1affected
  • 9.4.2.0-r2affected
  • 9.4.2.1-r1affected
  • 9.4.2.1-r2affected
  • 9.4.3.0-r1affected
  • 9.4.3.0-r2affected
  • 9.4.3.1-r1 to ≤ 9.4.3.1-r3affected
  • 9.4.4.0-r1affected
  • 9.4.4.1-r1affected
  • 9.4.5.0-r1affected
  • 9.4.5.0-r2affected
  • 9.4.5.1-r1affected
  • 10.0.0.0-r1 to ≤ 10.0.0.0-r4affected
  • 10.0.0.5-r1affected
  • 9.3.0.0-r1affected
  • 9.3.0.0-r2affected
  • 9.3.0.0-r3affected
  • 9.3.0.1-r1affected
  • 9.3.0.1-r2affected
  • 9.3.0.1-r3affected
  • 9.3.0.1-r4affected
  • 9.3.0.3-r1affected
  • 9.3.0.4-r1affected
  • 9.3.0.4-r2affected
  • 9.3.0.5-r1affected
  • 9.3.0.5-r2affected
  • 9.3.0.5-r3affected
  • 9.3.0.6-r1affected
  • 9.3.0.10-r1affected
  • 9.3.0.10-r2affected
  • 9.3.0.11-r1affected
  • 9.3.0.11-r2affected
  • 9.3.0.15-r1affected
  • 9.3.0.16-r1affected
  • 9.3.0.16-r2affected
  • 9.3.0.17-r1affected
  • 9.3.0.17-r2affected
  • 9.3.0.17-r3affected
  • 9.3.0.20-r1affected
  • 9.3.0.20-r2affected
  • 9.3.0.21-r1affected
  • 9.3.0.21-r2affected
  • 9.3.0.21-r3affected
  • 9.3.0.25-r1affected
  • 9.4.0.0-r1affected
  • 9.4.0.0-r2affected
  • 9.4.0.0-r3affected
  • 9.4.0.5-r1affected
  • 9.4.0.5-r2affected

References