Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-82120: HiRDB Server can cause memory overflow and crash
CVE-2026-82120 · published today
Summary
Several versions of Hitachi's HiRDB database server may allow data to be written beyond the allocated memory space. This can lead to a crash or let an attacker run unauthorized code on the server. Update to the latest patch from Hitachi or apply the vendor's recommended mitigation as soon as possible.
What to do
- Update hitachi hirdb server version 10 to version 10-08-05.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hitachi | hirdb server version 10 |
< 10-12-01 Fix: upgrade to 10-08-05
|
| hitachi | hirdb server version 9 | <= 09-66-22 |
| hitachi | hirdb server with additional function version 9 | <= 09-66/V |
| hitachi | hirdb server version 9(32) | <= 09-66-22 |
| hitachi | hirdb server with additional function version 9(32) | <= 09-66-/V |
Original advisory text
Heap-based Buffer Overflow Vulnerability in HiRDB
Heap-based Buffer Overflow Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Track software like this
Free during beta