CVE Vulnerabilities

CVE-2025-33132

Use of sizeof() on a Pointer Type

Published: Oct 28, 2025 | Modified: Nov 06, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.

Weakness

The code calls sizeof() on a pointer type, which can be an incorrect calculation if the programmer intended to determine the size of the data that is being pointed to.

Affected Software

NameVendorStart VersionEnd Version
Db2_high_performance_unload_loadIbm5.1.0.0 (including)6.1.0.0 (including)
Db2_high_performance_unload_loadIbm6.1.0.1 (including)6.1.0.1 (including)
Db2_high_performance_unload_loadIbm6.1.0.2 (including)6.1.0.2 (including)
Db2_high_performance_unload_loadIbm6.1.0.3 (including)6.1.0.3 (including)
Db2_high_performance_unload_loadIbm6.5.0.0 (including)6.5.0.0 (including)
Db2_high_performance_unload_loadIbm6.5.0.0-if1 (including)6.5.0.0-if1 (including)

Potential Mitigations

References