CVE-2025-33130mediumCWE-120

CVE-2025-33130: medium-severity vulnerability in IBM DB2 Merge Backup for Linux, UNIX and Windows

Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows

Published

Follow this CVE+ Monitor DB2 Merge Backup for Linux, UNIX and Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
IBM · DB2 Merge Backup for Linux, UNIX and Windows
Related CVEs — IBM DB2 Merge Backup for Linux, UNIX and Windows

In the same product, most dangerous first.

CVE-2025-33124MEDIUMFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsEPSS 0.3%CVE-2025-13108MEDIUMFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsEPSS 0.2%