Buffer Overflow Vulnerability in IBM DB2 Merge Backup for Sensitive Data Exposure
CVE-2025-13108

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Db2 Merge Backup For Linux, Unix And Windows
Vendor
CVE Published:
17 February 2026

What is CVE-2025-13108?

A buffer overflow vulnerability in IBM DB2 Merge Backup for Linux, UNIX, and Windows versions 12.1.0.0 allows attackers to exploit improper resource clearing. This can lead to unauthorized access to sensitive information stored in memory, posing significant risks to data confidentiality and integrity. Timely patching is recommended to mitigate these risks.

Affected Version(s)

DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 <= 2.1.0

References

https://www.ibm.com/support/pages/node/7260043
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.