CVE-2025-33126
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
IBM DB2 High Performance Unload versions 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to incorrect calculation of a buffer size.
Risk Assessment
The risk includes program crash, which may lead to service disruption and potential data loss.
Recommendation
It is recommended to upgrade to the latest version of IBM DB2 High Performance Unload that includes a fix for this issue.
Other vulnerabilities in IBM DB2 High Performance Unload
See all- CVE-2025-33133Medium
IBM DB2 High Performance Unload in the listed versions could allow an authenticated user to cause the program to crash due to an out of bounds write.
- CVE-2025-33132Medium
IBM DB2 High Performance Unload versions 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to incorrect calculation of the size of the data being pointed to.
- CVE-2025-33131Medium
IBM DB2 High Performance Unload in the listed versions could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
Original NVD description (English source)
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS