CVE-2025-33130: IBM DB2 Merge Backup

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.

Affected products

• IBM DB2 Merge Backup: version 12.1.0.0 only

Published 2026-02-17. Last modified 2026-06-17.