Skip to main content

Informix Dynamic Server CVE-2025-1991

| EUVDEUVD-2025-19451 HIGH
Integer Underflow (CWE-191)
2025-06-28 psirt@us.ibm.com
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 01:05 euvd
EUVD-2025-19451
Analysis Generated
Mar 16, 2026 - 01:05 vuln.today
CVE Published
Jun 28, 2025 - 13:15 nvd
HIGH 7.5

DescriptionCVE.org

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.

Analysis

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.

Technical ContextAI

An integer overflow occurs when an arithmetic operation produces a value that exceeds the maximum (or minimum) size of the integer type used to store it. This vulnerability is classified as Integer Underflow (CWE-191).

RemediationAI

Use safe integer arithmetic libraries. Check for overflow conditions before operations. Use appropriately sized integer types.

CVE-2012-3334 CRITICAL
9.0 Sep 25

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 all

CVE-2012-4857 CRITICAL
9.0 Dec 08

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users t

CVE-2024-45675 HIGH
8.4 Dec 02

CVE-2024-45675 is a security vulnerability (CVSS 8.4) that allows a local user. High severity vulnerability requiring pr

CVE-2016-0226 HIGH
7.8 Mar 28

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (

CVE-2023-28523 HIGH
7.8 Dec 09

IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds

CVE-2020-4799 HIGH
7.8 Oct 08

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds wri

CVE-2019-4253 HIGH
7.8 Aug 20

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious sha

CVE-2017-1508 MEDIUM
6.7 Sep 13

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privil

CVE-2021-20515 MEDIUM
6.7 Apr 30

IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. Ra

CVE-2017-1310 MEDIUM
6.5 Jun 29

IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large ass

CVE-2023-28527 MEDIUM
5.5 Dec 09

IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds check

CVE-2023-28526 MEDIUM
5.5 Dec 09

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds

Share

CVE-2025-1991 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy