CVE-2025-1329 IBM CICS TX code execution

High 7.8 Published 8 May 2025 Updated 26 Feb 2026

A local attacker can execute arbitrary code on IBM CICS TX systems due to improper handling of DNS return requests in the gethostbyaddr function.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-1329?

CVE-2025-1329 is a high-severity memory corruption vulnerability in IBM CICS TX Advanced, published on 8 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the

gethostbyaddr

function.

Weakness: CWE-787

Which versions are affected by CVE-2025-1329?

It affects 1 product.

Products include Ibm Cics Tx.

How do I fix CVE-2025-1329?

No fix has been published for CVE-2025-1329 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-1329 being exploited?

There is no known exploitation of CVE-2025-1329 in the wild and no public exploit code.

Sources

Also known as GHSA-x2q5-6m88-47fh.