Heap-Based Buffer Overflow in IBM Guardium Data Protection
CVE-2026-82335

8.1HIGH

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 October 2026

What is CVE-2026-82335?

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are susceptible to a heap-based buffer overflow due to inadequate validation of input data in the MongoDB protocol parser. An attacker can exploit this vulnerability by sending a maliciously crafted MongoDB SCRAM username that exceeds the expected length. This can lead to memory corruption, allowing an attacker to potentially disrupt service or execute arbitrary code on affected systems. Organizations utilizing affected versions are advised to implement the recommended patches and updates to safeguard their data.

Affected Version(s)

Guardium Data Protection 12.0

Guardium Data Protection 12.1

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7291674
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.