IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser.
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- IBM, MongoDB
- Product
- QRadar / WebSphere / Db2 / AIX / MQ / Maximo, MongoDB
- CVSS
- 8.1
- Exposure class
- Web platform, Database
Why it ranks 15 (Routine)
- CVSS 8.1 high
- Product class: web platform, database
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-82335 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.