IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.
| CVE | CVE-2026-82334 |
|---|---|
| Severidad | HIGH |
| CVSS | 8.1 / 10 |
| CWE | CWE-125 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Producto afectado
IBM Guardium Data Protection 12.0
Producto derivado de la descripción (el CPE estructurado de NVD aún no está publicado).