IBM Db2 <=12.1.5 IXF IMPORT Buffer Overflow
CVE-2026-10534 Published on August 12, 2026

IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-10534 is exploitable with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2026-10534 has been classified to as a Stack Overflow vulnerability or weakness.


Products Associated with CVE-2026-10534

Want to know whenever a new CVE is published for IBM Db2? stack.watch will email you.

 

Affected Versions

IBM Db2: