CVE-2026-84198: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in IBM Guardium Data Protection

CVE-2026-84198 is a classic buffer overflow vulnerability (CWE-120) in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. The flaw arises from improper validation of input size during a buffer copy operation, which could be exploited remotely to execute arbitrary code on the affected system. The vulnerability has a CVSS 3.1 score of 8.1, reflecting a high-severity risk with network attack vector, high attack complexity, and no required privileges or user interaction. No known exploits are reported in the wild, and no patch or remediation information is currently provided.

Successful exploitation could allow a remote attacker to execute arbitrary code, potentially leading to full compromise of the affected system, including confidentiality, integrity, and availability impacts. The vulnerability affects IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor IBM's security advisories for updates. Given the high attack complexity, limiting network exposure of the affected service may reduce risk.