CVE-2026-84246: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in IBM Guardium Data Protection

CVE-2026-84246 is a classic buffer overflow vulnerability (CWE-120) in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. The vulnerability allows a remote attacker to execute arbitrary code due to the lack of input size checking during buffer copy operations. The CVSS v3.1 score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability requires high attack complexity and no privileges or user interaction are needed for exploitation.

Successful exploitation of this vulnerability could lead to remote code execution, compromising confidentiality, integrity, and availability of the affected system. This could allow an attacker to fully control the IBM Guardium Data Protection instance running the vulnerable versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict network access to the affected systems and monitor for suspicious activity related to this vulnerability.