NetSight
low3.1

CVE-2026-12669

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and…

Impact

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.

Affected products

VendorProductAffected versions
IbmMq Operator
from 2.0.0 through 2.0.29
from 3.2.0 through 3.2.29
Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0
IbmSupplied Mq Advanced Container Images
Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1

Weakness classification

References