CVE-2024-25016: IBM Mq

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

Affected products

• IBM Mq: from 9.0.0.0, before 9.0.0.23 (fixed in 9.0.0.23); from 9.1.0.0, before 9.1.0.20 (fixed in 9.1.0.20); from 9.2.0, before 9.2.0.22 (fixed in 9.2.0.22); from 9.3.0, before 9.3.0.16 (fixed in 9.3.0.16)
• IBM Mq Appliance: from 9.3.0.0, up to and including 9.3.5.0

Published 2024-03-03. Last modified 2026-06-17.