CVE-2025-33131
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
IBM DB2 High Performance Unload in the listed versions could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
Risk Assessment
An authenticated user can crash the program, potentially leading to service disruption and data loss.
Recommendation
Upgrade to the latest version of IBM DB2 High Performance Unload with a fix. Restrict access to trusted users only.
Other vulnerabilities in IBM DB2 High Performance Unload
See all- CVE-2025-33133Medium
IBM DB2 High Performance Unload in the listed versions could allow an authenticated user to cause the program to crash due to an out of bounds write.
- CVE-2025-33132Medium
IBM DB2 High Performance Unload versions 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to incorrect calculation of the size of the data being pointed to.
- CVE-2025-33126Medium
IBM DB2 High Performance Unload versions 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to incorrect calculation of a buffer size.
Original NVD description (English source)
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS