7.5
High
CVE-2024-25048 IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking
Description
IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Appliance | Versions not published | |
| mq_appliance | 9.3.0.0 | No fix stated |
Other CVEs of MQ Appliance
The 36 CVEs of MQ Appliance →
CVE-2026-12538
IBM MQ Appliance is affected by an improper validation vulnerability
5.4
Medium
CVE-2026-10747
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to…
10.0
Critical
CVE-2025-14456
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
5.9
Medium
CVE-2025-3631
An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process…
6.5
Medium