Skip to content
OpenAdvisories
High · 7.5 CVE-2025-36512 EUVD-2025-22325GHSA-w7m3-x4xv-2qpw

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A speciall…

Published Jul 22, 2025 · Updated Nov 3, 2025 · Assigned by talos

Description

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Bloomberg Comdb2 8.1 —

References