CVE-2026-82344: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Guardium Data Protection

CVE-2026-82344 is a heap-based buffer overflow vulnerability in IBM Guardium Data Protection 12.0, 12.1, and 12.2. The issue exists in the S-TAP TrafficTap TDS login reassembly functionality where crafted TDS login fragments can overflow a fixed-size buffer. An unauthenticated remote attacker can exploit this to cause denial of service or execute arbitrary code on the vulnerable system. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity, with attack vector network, high attack complexity, no privileges required, and no user interaction needed.

Successful exploitation can result in denial of service or arbitrary code execution, which compromises confidentiality, integrity, and availability of the affected system. The attacker does not require authentication but must overcome high attack complexity.

No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected service and monitor for suspicious activity related to TDS login fragments.