CVE Vulnerabilities

CVE-2025-33132

Use of sizeof() on a Pointer Type

Published: Oct 28, 2025 | Modified: Nov 06, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.

Weakness

The code calls sizeof() on a pointer type, which can be an incorrect calculation if the programmer intended to determine the size of the data that is being pointed to.

Affected Software

Name Vendor Start Version End Version
Db2_high_performance_unload_load Ibm 5.1.0.0 (including) 6.1.0.0 (including)
Db2_high_performance_unload_load Ibm 6.1.0.1 (including) 6.1.0.1 (including)
Db2_high_performance_unload_load Ibm 6.1.0.2 (including) 6.1.0.2 (including)
Db2_high_performance_unload_load Ibm 6.1.0.3 (including) 6.1.0.3 (including)
Db2_high_performance_unload_load Ibm 6.5.0.0 (including) 6.5.0.0 (including)
Db2_high_performance_unload_load Ibm 6.5.0.0-if1 (including) 6.5.0.0-if1 (including)

Potential Mitigations

References