CVE-2026-82334

Summary

A heap-based out-of-bounds read vulnerability exists in IBM Guardium Data Protection's TDS7 LOGIN7 protocol parser, allowing remote attackers to potentially disclose sensitive information or cause denial of service by sending malformed packets with invalid offset or length values.

Exploitability

Exploitation requires sending a specially crafted TDS LOGIN7 packet over the network, which is moderately difficult without prior knowledge of the protocol structure but achievable by an attacker who can reach the vulnerable service.

Blast radius

If exploited, this vulnerability could affect all database monitoring and protection functions within IBM Guardium Data Protection, potentially exposing sensitive data or disrupting critical data security operations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.3 or later to remediate this heap-based out-of-bounds read vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.