Buffer Overflow Vulnerability in IBM Db2 for Linux

CVE-2025-33092

What is CVE-2025-33092?

IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2 are affected by a vulnerability that permits a local user to exploit a buffer overflow in the db2fm module. This issue arises from inadequate bounds checking, enabling potential attackers to overwrite memory and execute arbitrary code on the system. It is crucial for users to apply security patches provided by IBM to mitigate this risk.

References