CVE-2025-35966 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffe…
High CVSS: 7.5

CVE-2025-35966

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
Vendor
Bloomberg
Product
Comdb2
CWE
CWE-476
Yayın Tarihi
2025-07-22 16:15:26
Güncelleme
2025-11-03 20:18:30
Source Identifier
talos-cna@cisco.com
KEV Date Added
-

Kategoriler

CWE-476 Comdb2 HIGH Bloomberg 2025

Referanslar

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201 https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2201 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201