Null Pointer Dereference Vulnerability in Bloomberg Comdb2 Database

CVE-2025-48498

What is CVE-2025-48498?

A null pointer dereference issue exists in the Distributed Transaction component of Bloomberg Comdb2 8.1. When processing specific fields utilized for coordination, the vulnerability can be exploited by an attacker who connects to a database instance via TCP and sends a specially crafted protocol buffer message. This exploitation could result in interruptions to the service, causing a denial of service. Organizations using affected versions are urged to apply updates to minimize potential disruptions.

References