← CVE Intelligence

CVE-2025-48498

Bloomberg / Comdb2 PUBLISHED

Description (CNA)

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Bloomberg / Comdb2affected 8.1

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.