A critical buffer overflow vulnerability in IBM MQ allows remote, unauthenticated attackers to execute arbitrary code or trigger a denial of service condition.

This is an out-of-bounds write (CWE-787) occurring when the application processes malformed compressed data on channels with compression enabled. The vulnerability is exploitable by remote, unauthenticated attackers.

Successful exploitation poses a severe risk to organizational infrastructure, as it enables unauthorized remote code execution and service disruption. With a CVSS score of 8.1, the high severity reflects the potential for total system compromise, leading to data exfiltration or the loss of messaging availability within critical business workflows.

Immediate Action: Upgrade to the latest cumulative security updates for your specific IBM MQ version, such as 9.1.0.38, 9.2.0.44, or 9.3.0.42, as detailed in the IBM support documentation.

Proactive Monitoring: Review IBM MQ access logs for abnormal channel traffic or repeated connection failures that may indicate attempts to trigger compression-related buffer overflows.

Compensating Controls: Disable channel compression if it is not strictly required for business operations until the security updates can be successfully deployed.

Public Exploit Available: Unknown

Given the potential for remote code execution, this vulnerability represents a significant threat to IBM MQ deployments. Administrators should prioritize identifying vulnerable versions and applying the vendor-supplied cumulative security updates immediately to eliminate the underlying memory corruption risk.