CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36520
https://notcve.org/view.php?id=CVE-2025-36520
22 Jul 2025 — A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197 • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-46354
https://notcve.org/view.php?id=CVE-2025-46354
22 Jul 2025 — A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198 • CWE-617: Reachable Assertion •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-48498
https://notcve.org/view.php?id=CVE-2025-48498
22 Jul 2025 — A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199 • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36512
https://notcve.org/view.php?id=CVE-2025-36512
22 Jul 2025 — A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200 • CWE-617: Reachable Assertion •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-35966
https://notcve.org/view.php?id=CVE-2025-35966
22 Jul 2025 — A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201 • CWE-476: NULL Pointer Dereference •