High · published September 18, 2026
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.
| Product | Versions | Fixed in |
|---|---|---|
| ibm/mq | ≥ 9.1.0.0, ≤ 9.1.0.37 | — |
| ibm/mq | ≥ 9.2.0.0, ≤ 9.2.0.43 | — |
| ibm/mq | ≥ 9.3.0.0, ≤ 9.3.0.41 | — |
| ibm/mq | ≥ 9.3.0.0, ≤ 9.3.5.1 | — |
| ibm/mq | ≥ 9.4.0.0, ≤ 9.4.0.25 | — |
| ibm/mq | ≥ 9.4.0.0, ≤ 9.4.5.1 | — |
| ibm/mq | all versions | — |