{"id":"CVE-2026-82344","published":"2026-10-08T20:17:37.020","lastModified":"2026-10-10T04:18:16.730","description":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119","CWE-787"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291670","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow exists in IBM Guardium Data Protection's TDS login reassembly functionality, allowing unauthenticated remote attackers to potentially cause denial of service or execute arbitrary code by sending crafted TDS login fragments that exceed a fixed-size buffer.","exploitability":"Exploitation requires sending specially crafted TDS login fragments over the network with minimal preconditions, making it moderately difficult but possible for remote attackers to trigger.","blast_radius":"If exploited, this vulnerability could affect all systems running IBM Guardium Data Protection 12.0 or 12.1, potentially leading to full system compromise or service disruption across data protection infrastructure.","remediation":"Upgrade to IBM Guardium Data Protection 12.2 or later to address this heap-based buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","database","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:19:45.327Z"}}