CVE-2025-33124: IBM DB2 Merge Backup

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size.

Affected products

• IBM DB2 Merge Backup: version 12.1.0.0 only

Published 2026-02-17. Last modified 2026-06-17.