CVE-2026-84246

Received Received - Intake

Buffer Overflow in IBM Guardium Data Protection

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-84246

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Guardium	Data Protection 12.0
IBM	Guardium	Data Protection 12.1
IBM	Guardium	Data Protection 12.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. It allows a remote attacker to execute arbitrary code by sending specially crafted input that exceeds buffer limits.

Impact Analysis

An attacker could exploit this to run malicious code on the affected system, potentially gaining control over it. This could lead to data breaches, unauthorized access, or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements such as GDPR or HIPAA. Organizations using affected versions may face legal penalties or reputational damage.

Mitigation Strategies

Apply the latest security patches or updates from IBM for Guardium Data Protection versions 12.0, 12.1, and 12.2 to address the buffer overflow issue.

Hi! I’m here to help you understand CVE-2026-84246. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70