CVE-2025-33130CWE-120

Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows

Medium · published February 17, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-17T19:14Z
EPSS history
Timeline
  • 17 FEB 19:14Z
    Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
    cvelistv5