CVE-2024-25048: IBM Mq Appliance

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.

Affected products

• IBM Mq Appliance: from 9.3.0.0, before 9.3.0.17 (fixed in 9.3.0.17); from 9.3.0.0, before 9.3.5 (fixed in 9.3.5)

Published 2024-04-27. Last modified 2026-06-17.