CVE-2025-33132 | THREATINT

Description

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.

PUBLISHED Reserved 2025-04-15 | Published 2025-10-27 | Updated 2025-10-28 | Assigner ibm

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-467 Use of sizeof() on a Pointer Type

Product status

Default status

unaffected

6.1.0.3

affected

5.1.0.1

affected

6.1.0.2

affected

6.5

affected

6.5.0.0 IF1

affected

6.1.0.1

affected

6.1

affected

5.1

affected

References

www.ibm.com/support/pages/node/7249336 vendor-advisory patch

cve.org (CVE-2025-33132)

nvd.nist.gov (CVE-2025-33132)

Download JSON