CVE Tracker

CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap…

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.

Vendor

ibm

Product

guardium data protection

CVSS 3.1

9.8 (critical), scored by NVD (primary)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 3.1

8.1 (high), scored by psirt@us.ibm.comCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-119, CWE-787

Published

2026-10-08

NVD modified

2026-10-10

NVD status

Analyzed

Not in the CISA KEV catalogue at the last update.

Data last updated 15 Oct 2026. Sources: NVD API 2.0. Links: NVD, CISA KEV. Metadata only. ThreatWire does not host exploit code.