{"id":"CVE-2026-84875","published":"2026-10-08T22:17:34.430","lastModified":"2026-10-10T04:18:19.087","description":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7291674","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in IBM Guardium Data Protection allows remote attackers to execute arbitrary code with high severity impact. This flaw occurs in versions 12.0, 12.1, and 12.2, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a remote attacker with low privileges and involves a complex buffer overflow that may need specific input conditions to trigger successfully.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on affected Guardium systems, potentially leading to data breaches, privilege escalation, or complete system compromise.","remediation":"Upgrade to IBM Guardium Data Protection version 12.3 or later to remediate this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","database"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:24:29.275Z"}}