IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. (CVE-2026-82334)

CVE-2026-82334 describes a heap-based out-of-bounds read vulnerability in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. The issue exists in the TDS7 LOGIN7 protocol parser, where processing a maliciously crafted LOGIN7 packet containing invalid offset or length values can cause the software to read memory outside the intended buffer boundaries. This can result in information disclosure or denial of service conditions. The vulnerability is remotely exploitable without authentication but requires high attack complexity.

Successful exploitation could allow a remote attacker to cause information disclosure or denial of service on affected IBM Guardium Data Protection systems. The vulnerability affects confidentiality, integrity, and availability, as reflected in the CVSS vector (C:H/I:H/A:H). No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor IBM's advisories for updates and apply any official patches once released. Until then, consider restricting network access to the affected service to trusted sources and monitor for unusual activity related to TDS LOGIN7 protocol traffic.