Unrated severityNVD Advisory· Published Jul 22, 2025· Updated Nov 3, 2025
CVE-2025-48498
CVE-2025-48498
Description
A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
Affected products
2- Bloomberg/Comdb2v5Range: 8.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.