IBM Planning Analytics versions 2.0 and 2.1 contain a stack‑based buffer overflow caused by improper bounds checking. An attacker can trigger a buffer overflow and execute arbitrary code on the affected system. This flaw permits full compromise of the host, leading to total loss of confidentiality, integrity, and availability.

The vulnerability affects IBM Planning Analytics Local versions from 2.0 through 2.1.23. Versions prior to 2.1.0 of 2.1 are also impacted. IBM recommends installing the 2.1.24 update, which is now available through IBM Fix Central. The IBM Planning Analytics Cloud environment has already been remediated and is not affected.

With a CVSS score of 8.8 the flaw is considered high severity. The EPSS score of < 1% indicates a low probability of exploitation at present, though the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to be through exploited local access or potentially remote services that process untrusted input, as the description specifies buffer overflow leading to code execution. The combination of high severity and low exploitation probability suggests monitoring but prioritization of patching.