Heap-Based Buffer Overflow in IBM Guardium Data Protection
CVE-2026-82344

8.1HIGH

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 October 2026

What is CVE-2026-82344?

IBM Guardium Data Protection versions 12.0 and 12.1 are susceptible to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. This vulnerability allows an unauthenticated remote attacker to send specially crafted TDS login fragments, which can overflow the fixed-size reassembly buffer. The result may lead to denial of service or enable the execution of arbitrary code on the vulnerable system, posing significant security risks.

Affected Version(s)

Guardium Data Protection 12.0

Guardium Data Protection 12.1

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7291670
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.