CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

High 8.1 Published 8 Oct 2026 Updated 10 Oct 2026

Unauthenticated remote attackers can trigger a heap-based buffer overflow in IBM Guardium Data Protection, leading to arbitrary code execution or denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-82344?

CVE-2026-82344 is a high-severity memory corruption vulnerability in Ibm Guardium Data Protection, published on 8 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.

Weakness: CWE-787, CWE-119

Which versions are affected by CVE-2026-82344?

It affects 1 product.

Products include Ibm Guardium Data Protection.

How do I fix CVE-2026-82344?

No fix has been published for CVE-2026-82344 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-82344 being exploited?

There is no known exploitation of CVE-2026-82344 in the wild and no public exploit code.

All Ibm Guardium Data Protection vulnerabilities

Sources

Also known as GHSA-63gx-32hp-fj8w.