CVE-2026-82344

Summary

A heap-based buffer overflow exists in IBM Guardium Data Protection's TDS login reassembly functionality, allowing unauthenticated remote attackers to potentially cause denial of service or execute arbitrary code by sending crafted TDS login fragments that exceed a fixed-size buffer.

Exploitability

Exploitation requires sending specially crafted TDS login fragments over the network with minimal preconditions, making it moderately difficult but possible for remote attackers to trigger.

Blast radius

If exploited, this vulnerability could affect all systems running IBM Guardium Data Protection 12.0 or 12.1, potentially leading to full system compromise or service disruption across data protection infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2 or later to address this heap-based buffer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.