The vulnerability is a buffer overflow in the Sniffer component of IBM Guardium Data Protection. According to the vendor, a remote attacker who can interact with the Sniffer can trigger the overflow and execute arbitrary code. This flaw would allow complete compromise of the host on which the component runs, resulting in loss of confidentiality, integrity, and availability of the protected data and the underlying system.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are affected. The vulnerability is present in the Sniffer component shipped with all 12.x releases of the product.

The CVSS score of 8.1 classifies this as a high‑severity flaw. The EPSS score is not available, so the likelihood of exploitation cannot be quantified from the current data. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be remote because the description states "remote attacker"; it is likely that the attacker only needs network access to the Sniffer service to exploit the buffer overflow.