← CVE Intelligence

CVE-2025-33092

IBM Db2 for Linux code execution PUBLISHED

Description (CNA)

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

Affected (CNA)

Vendor / productVersions
IBM / Db2affected 11.5.0 through 11.5.9; affected 12.1.0 through 12.1.2

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.