Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-36122 EUVD-2025-209601GHSA-36qp-rc95-9xrj

IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic

Published Apr 30, 2026 · Updated May 27, 2026 · Assigned by ibm

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service using a specially crafted SQL query due to improper allocation of system resources.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.3 —

Advisories 1

References