CVE-2026-82335

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.

Score
CVSS 3.1 9.8 Critical
Status
Analyzed - psirt@us.ibm.com
Published
2026-10-08
Last modified
2026-10-10
Weaknesses
CWE-119, CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about