Threat database

amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or compromised AMQP peer can send a short body-frame header with a large declared payload length, causing ReadFrame and the body-frame parser to allocate attacker-selected memory before the payload is received or the frame's protocol state is rejected. The condition is reachable through public Open even when Config.FrameSize is set to the protocol minimum and can cause severe memory pressure, out-of-memory termination, or loss of the client process before authentication completes. This issue is fixed in version 1.14.0.

CVE-2026-106431 is an off-by-one out-of-bounds write vulnerability in the BSON bulk document writer component of the MongoDB C Driver. The flaw occurs when a document ends exactly at a specific buffer boundary, causing a single zero byte to be written just beyond the allocated heap memory. This can result in adjacent memory corruption or process termination if an attacker controls the size of serialized documents via the BSON bulk-writer API. The vulnerability affects MongoDB C Driver versions from 0.5.0 up to but not including 1.30.13, and from 2.0.0 up to but not including 2.5.6. The CVSS 4.0 base score is 5.9, indicating medium severity. No known exploits are reported in the wild, and no official patch links are provided in the data.

CVE-2026-106438 is a medium severity vulnerability in the MongoDB C Driver involving incorrect calculation during Decimal128 string parsing. The driver improperly accepts certain over-precision decimal strings with leading zeros instead of rejecting them, causing the stored or used numeric value to differ from the original input. This can occur when an actor supplies a decimal string, including via Extended JSON parsing.

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.

CVE-2026-106434 is a medium severity vulnerability in MongoDB libmongocrypt versions 1.5.0 up to but not including 1.20.5. The flaw involves improper validation of the integrity check value during explicit decryption, allowing unrecognized encrypted payloads to be returned unchanged instead of triggering a decryption error. This could lead to applications treating manipulated ciphertext as decrypted plaintext.

CVE-2026-106433 is a high-severity type confusion vulnerability in MongoDB's libmongocrypt library. It arises from improper state management when cleaning up key documents containing duplicate masterKey fields, leading to incompatible type usage. An authenticated actor who can modify key vault documents or a server returning such malformed key documents may cause invalid memory access or frees in the client process. This can result in application termination or memory corruption.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based out-of-bounds read vulnerability in the TDS7 LOGIN7 protocol parser. This flaw allows a remote attacker to send a specially crafted TDS LOGIN7 packet with invalid offset or length values, potentially leading to information disclosure or denial of service. The vulnerability has a high severity rating with a CVSS score of 8.1. No patch or remediation information is currently provided.

A vulnerability in Borewit music-metadata versions before 11.15.0 causes an unhandled exception leading to a process crash. The issue arises from an un-awaited asynchronous call when skipping unrecognized chunks in DSF audio files, which can result in a negative argument passed to a function that throws a RangeError. This error occurs after the main parsing promise resolves, making it uncatchable by typical try/catch error handling. The impact is a denial-of-service (DoS) condition where a single crafted DSF file can crash the Node.js process using music-metadata, affecting availability.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based buffer overflow vulnerability in the MongoDB protocol parser. This flaw arises when a remote attacker sends a specially crafted MongoDB SCRAM username with excessive length, leading to memory corruption. The vulnerability can result in denial of service or arbitrary code execution. The CVSS score is 8.1, indicating high severity.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based buffer overflow vulnerability in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size buffer, potentially causing denial of service or arbitrary code execution.

A resource consumption vulnerability exists in Borewit's music-metadata library prior to version 11.16.0. The flaw occurs in the MP4 stsd sample-description parser where an attacker can craft an MP4 input with a zero sample-entry size and a controlled entry_count, causing an infinite synchronous loop. This leads to blocking the Node.js event loop and potentially exhausting system memory. The issue was introduced after version 11.14.0 and fixed in version 11.16.0.

A vulnerability in Borewit's music-metadata library prior to version 11.16.0 allows an attacker to cause excessive memory allocation by providing a crafted MP4 file with an oversized 64-bit extended atom size. This can lead to denial of service due to process failure or resource exhaustion during parsing of certain MP4 atoms. The issue is fixed in version 11.16.0.

IBM Guardium Data Protection 12.2 contains a critical stored cross-site scripting (XSS) vulnerability in the Quick Search results grid. This vulnerability allows an unauthenticated attacker who can influence monitored database traffic to execute malicious scripts in the browser of an authenticated user. The vulnerability has a CVSS score of 9.3, indicating a high impact on confidentiality and integrity. No patch or remediation information is currently provided.

IBM Guardium Data Protection version 12.2 contains a local privilege escalation vulnerability in the cp_wrapper component. This flaw allows a low-privileged local user to gain root privileges, potentially enabling unauthorized access or modification of sensitive system files. The vulnerability is classified under improper privilege management (CWE-269).

IBM Guardium Data Protection version 12.2 contains a vulnerability involving the use of hard-coded credentials and weak cryptographic protection in the pkcrypto passkey component. This flaw allows a local attacker to recover the root password and escalate privileges to root. The vulnerability has a high severity rating with a CVSS score of 8.4.

IBM Guardium Data Protection version 12.2 contains a race condition vulnerability in its patch installer that allows signature verification bypass. This flaw can be exploited by a local attacker to execute arbitrary code with root privileges, leading to full system compromise. The vulnerability is classified as CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization). It has a high severity with a CVSS score of 7.8. No patch or official remediation information is currently provided. No known exploits are reported in the wild.

IBM Guardium Data Protection versions 12.1 and 12.2.2 contain a critical vulnerability in the edge-controller component due to missing authentication. This flaw allows an unauthenticated remote attacker to execute arbitrary container images, potentially gaining control over managed edge clusters. The vulnerability is identified as CWE-306 and has a CVSS 3.1 score of 9.8, indicating a critical severity level.

A vulnerability in Borewit's music-metadata prior to version 11.16.0 allows an attacker to cause excessive memory allocation by manipulating the length of VINT elements in Matroska and WebM EBML parsers. This can lead to out-of-memory denial of service or a fatal abort in Node.js 26.7.0. The issue is fixed in version 11.16.0.

IBM Guardium Data Protection version 12.2.2 logs sensitive credentials such as SECRET and API_KEY at INFO level in edge-controller and edge-manager components. An authenticated attacker with access to these logs could retrieve these credentials and potentially impersonate services or access the Guardium control plane without authorization. The vulnerability is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and has a CVSS 3.1 score of 6.5 (medium severity).

IBM Guardium Data Protection version 12.2 contains a path traversal vulnerability in its GIM file-upload functionality. This flaw allows an unauthenticated attacker to write arbitrary files to the Collector system. The vulnerability is identified as CWE-22 and has a CVSS 3.1 base score of 7.5, indicating high severity. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.