The vulnerability resides in the IBM Informix oninit sq_sgkprepare routine, where an unchecked length field in the SQL interface handler can overflow a stack buffer. Based on the description, it is inferred that the attacker must supply crafted SQL over the network to trigger the overflow. Exploitation allows an attacker to inject crafted SQL that overflows the buffer, giving the attacker control over the execution flow and the ability to run arbitrary code with the privileges of the database server process. This yields full confidentiality, integrity, and availability compromise of the affected server.

IBM Informix Dynamic Server is affected, including versions 12.10.x, 14.10.0, 14.10, 15.0.0, and 15.0. All listed product lines are vulnerable until the vendor’s fix is applied. The vendor states the issue is resolved in Informix 14.10.xC13W13 and 15.0.1.14.

Based on the description, the likely attack vector is an attacker sending crafted SQL over the network to the Informix server, targeting the SQL interface handler. The CVSS score of 8.8 classifies the flaw as high severity, and while an EPSS score is not available, the lack of any known exploitation information in KEV suggests the vulnerability is not publicly known to be exploited yet. However, the nature of the vulnerability—a stack-based buffer overflow triggered by remote input—means a motivated adversary could craft a malicious payload over the network, exploiting the vulnerability before a patch is applied. The risk remains high until the specified fixed versions are deployed or until mitigation measures are enacted.