Skip to content
OpenAdvisories
High · 7.5 CVE-2025-48498 EUVD-2025-22324GHSA-wm6m-r6vf-23qh

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number o…

Published Jul 22, 2025 · Updated Nov 3, 2025 · Assigned by talos

Description

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Bloomberg Comdb2 8.1 —

References