IBM Guardium S-TAP Heap Overflow & OOB Read Vulnerabilities (CVE-2026-82344/334)

Vulnerability Overview Multiple vulnerabilities exist in the Windows S-TAP component of IBM Security Guardium, specifically: 1. CVE-2026-82344 - Description: A heap-based buffer overflow vulnerability exists in the S-TAP TrafficTap TDS Login Reassembly functionality of IBM Security Guardium. An unauthenticated remote attacker can send specially crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially leading to denial of service or arbitrary code execution. - CWE: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer - CVSS Source: IBM - CVSS Base Score: 8.1 - CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) 2. CVE-2026-82334 - Description: A heap-based out-of-bounds read vulnerability exists in the TDS7 LOGIN7 protocol parser of IBM Security Guardium. A remote attacker can send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially leading to information disclosure or denial of service. - CWE: CWE-125: Out-of-bounds Read - CVSS Source: IBM - CVSS Base Score: 8.1 - CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Affected Products Affected Product: IBM Guardium Data Protection Affected Versions: 12.2, 12.1, 12.0 Operating System: Windows Remediation IBM strongly recommends that all users of affected versions immediately apply the latest IBM Guardium Data Protection Windows S-TAP patch. The patch link is provided below: Additional Information Workarounds and Mitigations: None References: - Complete CVSS v3 Guide - On-line Calculator v3 Related Information: - IBM Security Engineering Web Portal - IBM Product Security Incident Response Blog Disclaimer The Common Vulnerability Scoring System (CVSS) is an industry open standard created by the Forum of Incident Response and Security Teams (FIRST) to convey vulnerability severity and help determine response urgency and priority. IBM provides CVSS scores "as is" and makes no expressed or implied warranties. Customers are responsible for evaluating the impact of vulnerabilities on their environments and referencing the links in this security advisory.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Guardium S-TAP Heap Overflow & OOB Read Vulnerabilities (CVE-2026-82344/334)

More from this source