CVE-2026-7771

Summary

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

Affected Software

VendorProductVersion RangeStatus
IBMDb211.5.0 <= 11.5.9affected
IBMDb212.1.0 <= 12.1.4affected

Weaknesses

  • CWE-835: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

Workarounds

Ensure that the query is applying the predicates as intended.

References