CVE-2025-33132
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | DB2 High Performance Unload | 6.1.0.3 | affected |
| IBM | DB2 High Performance Unload | 5.1.0.1 | affected |
| IBM | DB2 High Performance Unload | 6.1.0.2 | affected |
| IBM | DB2 High Performance Unload | 6.5 | affected |
| IBM | DB2 High Performance Unload | 6.5.0.0 IF1 | affected |
| IBM | DB2 High Performance Unload | 6.1.0.1 | affected |
| IBM | DB2 High Performance Unload | 6.1 | affected |
| IBM | DB2 High Performance Unload | 5.1 | affected |
Weaknesses
- CWE-467: CWE-467 Use of sizeof() on a Pointer Type
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.