IBM MQ versions 9.1.0.0 through 10.0.0.0 contain a stack-based buffer overflow vulnerability (CWE-121) due to improper validation of deeply nested certificate data during TLS certificate processing. This flaw allows a remote attacker possessing a trusted TLS client certificate to trigger a denial of service and potentially corrupt memory contents. The vulnerability affects multiple LTS and CD releases of IBM MQ. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector network, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

An attacker with a trusted TLS client certificate can remotely exploit this vulnerability to cause a denial of service on the IBM MQ service and potentially manipulate memory contents, which may lead to further undefined behavior or compromise. The impact includes partial loss of confidentiality and integrity, and a high impact on availability.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is released, restrict access to trusted TLS client certificates and monitor for unusual TLS certificate processing behavior.