Security Bulletin: IBM MQ is affected by an out-of-bounds read vulnerability (CVE-2026-12669)

Summary IBM MQ has addressed an out-of-bounds read vulnerability when sending malformed compressed data Vulnerability Details CVEID:CVE-2026-12669 DESCRIPTION: IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the dat...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...

CVE-2017-11367

The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data...

CVE-2017-11367

The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data...

CVE-2017-11367: Out-of-bounds Read

The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data...

Linter Bastion Code Execution

The decompression algorithm in the zlib library version 1.1.3, which is part of the Linter Bastion database management system, allows for the use of the inflateEnd function to clean the memory more than once double-free. Exploiting this vulnerability enables attackers to execute arbitrary code by...