CVE-2026-12670
Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in IBM MQ via Memory Exhaustion

Publication date: 2026-10-19

Last updated on: 2026-10-23

Assigner: IBM Corporation

Description
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-23
Generated
2026-11-08
AI Q&A
2026-10-19
EPSS Evaluated
2026-11-07
NVD
CVE-2026-12670
EUVD
EUVD-2026-104462

Affected Vendors & Products

Showing 109 associated CPEs
Vendor Product Version / Range
ibm mq_operator From 2.0.0 (inc) to 2.0.29 (inc)
ibm mq_operator 3.3.0
ibm mq_operator 3.4.0
ibm mq_operator 3.4.1
ibm mq_operator 3.5.0
ibm mq_operator 3.5.1
ibm supplied_mq_advanced_container_images 9.4.1.0
ibm supplied_mq_advanced_container_images 9.4.1.0
ibm supplied_mq_advanced_container_images 9.4.1.1
ibm supplied_mq_advanced_container_images 9.4.2.0
ibm supplied_mq_advanced_container_images 9.4.2.0
ibm supplied_mq_advanced_container_images 9.4.2.1
ibm supplied_mq_advanced_container_images 9.4.2.1
ibm supplied_mq_advanced_container_images 9.4.3.0
ibm mq_operator From 3.2.0 (inc) to 3.2.29 (inc)
ibm mq_operator 3.5.2
ibm mq_operator 3.5.3
ibm mq_operator 3.6.0
ibm mq_operator 3.6.1
ibm mq_operator 3.6.2
ibm mq_operator 3.6.3
ibm mq_operator 3.6.4
ibm mq_operator 3.7.0
ibm mq_operator 3.7.1
ibm mq_operator 3.7.2
ibm mq_operator 3.8.0
ibm mq_operator 3.8.1
ibm mq_operator 3.9.0
ibm mq_operator 3.9.1
ibm mq_operator 3.9.2
ibm mq_operator 4.0.0
ibm mq_operator 4.0.1
ibm mq_operator 4.0.2
ibm mq_operator 4.0.3
ibm mq_operator 4.0.4
ibm supplied_mq_advanced_container_images 10.0.0.0
ibm supplied_mq_advanced_container_images 10.0.0.0
ibm supplied_mq_advanced_container_images 10.0.0.0
ibm supplied_mq_advanced_container_images 10.0.0.0
ibm supplied_mq_advanced_container_images 10.0.0.5
ibm supplied_mq_advanced_container_images 9.4.3.0
ibm supplied_mq_advanced_container_images 9.4.3.1
ibm supplied_mq_advanced_container_images 9.4.3.1
ibm supplied_mq_advanced_container_images 9.4.3.1
ibm supplied_mq_advanced_container_images 9.4.4.0
ibm supplied_mq_advanced_container_images 9.4.4.0
ibm supplied_mq_advanced_container_images 9.4.4.0
ibm supplied_mq_advanced_container_images 9.4.4.0
ibm supplied_mq_advanced_container_images 9.4.4.1
ibm supplied_mq_advanced_container_images 9.4.5.0
ibm supplied_mq_advanced_container_images 9.4.5.0
ibm supplied_mq_advanced_container_images 9.4.5.1
ibm supplied_mq_advanced_container_images 9.3.0.0
ibm supplied_mq_advanced_container_images 9.3.0.0
ibm supplied_mq_advanced_container_images 9.3.0.0
ibm supplied_mq_advanced_container_images 9.3.0.1
ibm supplied_mq_advanced_container_images 9.3.0.1
ibm supplied_mq_advanced_container_images 9.3.0.1
ibm supplied_mq_advanced_container_images 9.3.0.1
ibm supplied_mq_advanced_container_images 9.3.0.10
ibm supplied_mq_advanced_container_images 9.3.0.10
ibm supplied_mq_advanced_container_images 9.3.0.11
ibm supplied_mq_advanced_container_images 9.3.0.11
ibm supplied_mq_advanced_container_images 9.3.0.15
ibm supplied_mq_advanced_container_images 9.3.0.16
ibm supplied_mq_advanced_container_images 9.3.0.16
ibm supplied_mq_advanced_container_images 9.3.0.17
ibm supplied_mq_advanced_container_images 9.3.0.17
ibm supplied_mq_advanced_container_images 9.3.0.17
ibm supplied_mq_advanced_container_images 9.3.0.20
ibm supplied_mq_advanced_container_images 9.3.0.20
ibm supplied_mq_advanced_container_images 9.3.0.3
ibm supplied_mq_advanced_container_images 9.3.0.4
ibm supplied_mq_advanced_container_images 9.3.0.4
ibm supplied_mq_advanced_container_images 9.3.0.5
ibm supplied_mq_advanced_container_images 9.3.0.5
ibm supplied_mq_advanced_container_images 9.3.0.5
ibm supplied_mq_advanced_container_images 9.3.0.6
ibm supplied_mq_advanced_container_images 9.3.0.21
ibm supplied_mq_advanced_container_images 9.3.0.21
ibm supplied_mq_advanced_container_images 9.3.0.21
ibm supplied_mq_advanced_container_images 9.3.0.25
ibm supplied_mq_advanced_container_images 9.4.0.0
ibm supplied_mq_advanced_container_images 9.4.0.0
ibm supplied_mq_advanced_container_images 9.4.0.0
ibm supplied_mq_advanced_container_images 9.4.0.5
ibm supplied_mq_advanced_container_images 9.4.0.5
ibm supplied_mq_advanced_container_images 9.4.0.10
ibm supplied_mq_advanced_container_images 9.4.0.10
ibm supplied_mq_advanced_container_images 9.4.0.11
ibm supplied_mq_advanced_container_images 9.4.0.11
ibm supplied_mq_advanced_container_images 9.4.0.6
ibm supplied_mq_advanced_container_images 9.4.0.6
ibm supplied_mq_advanced_container_images 9.4.0.7
ibm supplied_mq_advanced_container_images 9.4.0.11
ibm supplied_mq_advanced_container_images 9.4.0.12
ibm supplied_mq_advanced_container_images 9.4.0.12
ibm supplied_mq_advanced_container_images 9.4.0.15
ibm supplied_mq_advanced_container_images 9.4.0.15
ibm supplied_mq_advanced_container_images 9.4.0.16
ibm supplied_mq_advanced_container_images 9.4.0.16
ibm supplied_mq_advanced_container_images 9.4.0.17
ibm supplied_mq_advanced_container_images 9.4.0.17
ibm supplied_mq_advanced_container_images 9.4.0.20
ibm supplied_mq_advanced_container_images 9.4.0.21
ibm supplied_mq_advanced_container_images 9.4.0.21
ibm supplied_mq_advanced_container_images 9.4.0.25
ibm supplied_mq_advanced_container_images 9.4.0.25
ibm supplied_mq_advanced_container_images 9.4.0.26

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-681 When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM MQ allows an authenticated attacker to cause a denial of service by sending a specially crafted message. The message triggers excessive memory operations during character set conversion, potentially consuming system resources and disrupting service.

Impact Analysis

An attacker could exploit this to degrade or completely disrupt IBM MQ services, leading to downtime for message processing. This may affect applications relying on IBM MQ for communication, causing delays or failures in message delivery.

Compliance Impact

The vulnerability could lead to denial of service due to excessive memory operations, potentially disrupting system availability. This may impact compliance with standards requiring high availability, such as GDPR (data processing continuity) and HIPAA (system reliability for protected health information).

Mitigation Strategies

Apply the latest IBM MQ security patches or updates as soon as they become available to address the denial of service vulnerability caused by excessive memory operations during character set conversion.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12670. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...