8.1
High
CVE-2026-82335 IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol…
Description
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.2 | No fix stated |
| Guardium Data Protection | 12.1 | No fix stated |
| Guardium Data Protection | 12.0 | No fix stated |
Other CVEs of Guardium Data Protection
The 92 CVEs of Guardium Data Protection →
CVE-2026-82891
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use…
8.1
High
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path…
9.8
Critical
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements…
9.8
Critical
CVE-2026-82895
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
8.1
High