IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 27, 2026 · NIST NVD

   Detected

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

2. Oct 14, 2026 · NIST NVD

   Updated

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

Affected

• cpe ibm/db2version unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-6052

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-6052

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2026-6052

  IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

  nvd.nist.gov

References

• Vendor Advisory · ibm.com