{"id":"CVE-2026-82334","published":"2026-10-08T20:17:36.737","lastModified":"2026-10-10T04:18:16.417","description":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-125"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291670","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based out-of-bounds read vulnerability exists in IBM Guardium Data Protection's TDS7 LOGIN7 protocol parser, allowing remote attackers to potentially disclose sensitive information or cause denial of service by sending malformed packets with invalid offset or length values.","exploitability":"Exploitation requires sending a specially crafted TDS LOGIN7 packet over the network, which is moderately difficult without prior knowledge of the protocol structure but achievable by an attacker who can reach the vulnerable service.","blast_radius":"If exploited, this vulnerability could affect all database monitoring and protection functions within IBM Guardium Data Protection, potentially exposing sensitive data or disrupting critical data security operations.","remediation":"Upgrade to IBM Guardium Data Protection 12.3 or later to remediate this heap-based out-of-bounds read vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["database","memory-corruption","remote-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:20:00.180Z"}}