CVE-2026-84035

Summary

A stack-based buffer overflow in IBM Guardium Data Protection allows remote attackers to execute arbitrary code with high severity. This vulnerability arises from insufficient bounds checking when processing user input, potentially enabling attackers to gain full system control.

Exploitability

Exploitation requires a remote attacker with network access to the vulnerable service, and is moderately difficult due to the need for precise buffer overflow crafting but does not require user interaction or elevated privileges.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the Guardium server, potentially leading to complete system compromise, data exfiltration, and lateral movement within the protected network environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.1 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.