CVE-2026-84058: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Guardium Data Protection

CVE-2026-84058 is a buffer overrun vulnerability (CWE-119) in the TDS PRELOGIN packet decoder component of IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. An unauthenticated remote attacker can send a maliciously crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector, which may lead to denial of service or potentially arbitrary code execution on the Collector appliance. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patch or remediation details are provided in the source data.

Successful exploitation can cause denial of service or arbitrary code execution on the IBM Guardium Collector appliance, impacting confidentiality, integrity, and availability of the affected system. This could allow an attacker to disrupt monitoring operations or gain control over the Collector appliance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the IBM Guardium Collector appliance to trusted sources only and monitor for suspicious TDS PRELOGIN packets. Follow IBM's official guidance once published.