{"api_version":"1","generated_at":"2026-10-24T12:30:32+00:00","cve":"CVE-2025-33132","urls":{"html":"https://cve.report/CVE-2025-33132","api":"https://cve.report/api/cve/CVE-2025-33132.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-33132","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-33132"},"summary":{"title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","description":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.","state":"PUBLISHED","assigner":"ibm","published_at":"2025-10-28 00:15:38","updated_at":"2026-10-08 11:10:00"},"problem_types":["CWE-467","CWE-467 CWE-467 Use of sizeof() on a Pointer Type"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Secondary","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7249336","name":"https://www.ibm.com/support/pages/node/7249336","refsource":"psirt@us.ibm.com","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-33132","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-33132","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.1.0.3","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 5.1.0.1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.1.0.2","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.5","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.5.0.0 IF1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.1.0.1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 6.1","platforms":[]},{"source":"CNA","vendor":"IBM","product":"DB2 High Performance Unload","version":"affected 5.1","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2025","cve_id":"33132","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"aix","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"6.1.0.1","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"6.1.0.2","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"6.1.0.3","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"6.5.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"6.5.0.0","cpe7":"if1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"1","versionEndIncluding":"6.1.0.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2_high_performance_unload_load","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"linux_on_ibm_z","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"33132","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-33132","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-28T13:53:17.971219Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-10-28T13:53:31.618Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:interm_fix1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.5.0.0:if1:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:db2_high_performance_unload:5.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"DB2 High Performance Unload","vendor":"IBM","versions":[{"status":"affected","version":"6.1.0.3"},{"status":"affected","version":"5.1.0.1"},{"status":"affected","version":"6.1.0.2"},{"status":"affected","version":"6.5"},{"status":"affected","version":"6.5.0.0 IF1"},{"status":"affected","version":"6.1.0.1"},{"status":"affected","version":"6.1"},{"status":"affected","version":"5.1"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.</p>"}],"value":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-467","description":"CWE-467 Use of sizeof() on a Pointer Type","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-27T23:57:12.201Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7249336"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central</p>"}],"value":"Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central"}],"source":{"discovery":"UNKNOWN"},"title":"Fixes to common vulnerabilities found in IBM Db2 High Performance Unload","x_generator":{"engine":"ibm-cvegen"}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2025-33132","datePublished":"2025-10-27T23:57:12.201Z","dateReserved":"2025-04-15T17:51:11.506Z","dateUpdated":"2025-10-28T13:53:31.618Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2025-10-28 00:15:38","lastModifiedDate":"2026-10-08 11:10:00","problem_types":["CWE-467","CWE-467 CWE-467 Use of sizeof() on a Pointer Type"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-28T13:53:17.971219Z","id":"CVE-2025-33132","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0.0","versionEndIncluding":"6.1.0.0","matchCriteriaId":"EAD3A49C-CBF6-4014-8C06-FB420BEB54A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:6.1.0.1:-:*:*:*:*:*:*","matchCriteriaId":"3D79E685-229A-495B-9737-084F472403CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:6.1.0.2:-:*:*:*:*:*:*","matchCriteriaId":"59CAECE6-E2F0-46D2-B7EE-EFA600072730"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:6.1.0.3:-:*:*:*:*:*:*","matchCriteriaId":"E7DBB818-2879-4BD5-9A05-ABDF771A23D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:6.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D6ACF327-FF08-49B3-8902-7759258B18C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_high_performance_unload_load:6.5.0.0:if1:*:*:*:*:*:*","matchCriteriaId":"2BEF8EB1-FB2A-4CD4-BA6B-6DFD18441227"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*","matchCriteriaId":"E492C463-D76E-49B7-A4D4-3B499E422D89"},{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*","matchCriteriaId":"B955E472-47E3-4C32-847B-F6BB05594BA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"33132","Ordinal":"1","Title":"Fixes to common vulnerabilities found in IBM Db2 High Performanc","CVE":"CVE-2025-33132","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"33132","Ordinal":"1","NoteData":"IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.","Type":"Description","Title":"Fixes to common vulnerabilities found in IBM Db2 High Performanc"}]}}}