← CVE Radar
CVE-2026-82334IBM Guardium Data Protection Out-of-bounds Read
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.
9.1 CRITICALEPSS 0.30%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.1 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
| 8.1 | HIGH | 3.1ibm (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-82334
- Status
- Analyzed
- Assigner (CNA)
- ibm
- Published
- Oct 8, 2026
- Last modified
- 2026-10-10 04:18 UTC
- Weaknesses
- CWE-125 · Out-of-bounds Read
Affected Products
As published by the CNA in the CVE record.
IBMGuardium Data Protection3 version ranges
- 12.0
- 12.1
- 12.2