A stack-based buffer overflow exists in HiRDB Server and its variants. This flaw allows an attacker to corrupt the execution stack, potentially executing arbitrary code with the privileges of the database process. The consequence is loss of confidentiality, integrity, and availability for affected systems.

The vulnerability impacts Hitachi HiRDB Server Version 10 prior to 10-12-01, HiRDB Server Version 9 up to 09-66-22, HiRDB Server with Additional Function Version 9 up to 09-66/V, HiRDB Server Version 9(32) from 09-02 through 09-66-22, and HiRDB Server with Additional Function Version 9(32) up to 09-66-/V.

With a CVSS score of 9.8 the flaw is critical. EPSS data is unavailable and the vulnerability is not yet in the CISA KEV catalog. The likely attack vector is remote, leveraging network access to the HiRDB service; an attacker would need to send malformed input that triggers the overflow.