CVE-2026-10534

Analyzed Analyzed - Analysis Complete

Buffer Overflow in IBM Db2 via IXF IMPORT Parser

Publication date: 2026-08-12

Last updated on: 2026-10-23

Assigner: IBM Corporation

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-10-23

Generated

2026-11-08

AI Q&A

2026-08-13

EPSS Evaluated

2026-11-07

NVD

CVE-2026-10534

EUVD

EUVD-2026-57600

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	db2	From 11.5 (inc) to 11.5.9 (inc)
ibm	db2	From 12.1.0 (inc) to 12.1.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 have a buffer overflow vulnerability in the IXF IMPORT parser. This flaw could allow an attacker to execute arbitrary code or cause a denial of service by sending specially crafted input.

Detection Guidance

This vulnerability is specific to IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5. Detection requires checking installed Db2 versions and monitoring for buffer overflow attempts during IXF IMPORT operations. No direct commands are provided in the CVE details, but you should verify Db2 versions and inspect logs for import-related crashes or anomalies.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access, data breaches, system crashes, or further network compromise. Attackers might gain control over affected systems or steal sensitive information.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR, HIPAA, or other regulations. Non-compliance risks include fines, legal penalties, and reputational damage due to unauthorized data exposure.

Mitigation Strategies

Apply the latest IBM Db2 patches or updates to versions beyond 11.5.9 or 12.1.5 to address the buffer overflow in the IXF IMPORT parser.

Hi! I’m here to help you understand CVE-2026-10534. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...