EUVD-2026-62709
GHSA-3fcr-249g-2cg3
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
Network-reachable but requires low-privilege authentication and high-complexity conditions; no integrity impact despite write primitive, consistent with vendor assessment.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.
AnalysisAI
Out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 enables remote authenticated attackers to trigger memory corruption leading to partial information disclosure and denial of service. The flaw (CWE-787) requires low-privilege credentials and high attack complexity, placing it at CVSS 4.2 Medium - a realistic but bounded threat profile. No public exploit code or active exploitation is confirmed at time of analysis; IBM has released a vendor patch via advisory at https://www.ibm.com/support/pages/node/7283858.
Technical ContextAI
The vulnerability is classified as CWE-787 (Out-of-Bounds Write), a memory safety flaw where a write operation exceeds the bounds of an allocated buffer, corrupting adjacent memory. This applies to IBM AIX - IBM's proprietary Unix-based operating system for Power Systems hardware - and PowerVM VIOS (Virtual I/O Server), the hypervisor management layer that mediates virtualized I/O between Logical Partitions (LPARs). Notably, CWE-787 typically manifests as an integrity or availability-class impact (memory corruption, crash, or code execution); the co-occurrence of information disclosure in the description is atypical and may suggest that the corrupted memory region exposes readable adjacent data as a side effect, or that the vendor's CWE assignment is imprecise. CPE strings cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* confirm both the OS and hypervisor management stack are in scope, potentially affecting enterprise Power Systems deployments across financial, government, and critical infrastructure sectors.
RemediationAI
IBM has released a patch addressing this vulnerability; the authoritative fix guidance is available at https://www.ibm.com/support/pages/node/7283858, which will specify the exact APAR numbers, Technology Levels, and interim fixes required for AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1. Exact patched build identifiers are not independently confirmed beyond this advisory URL - administrators must consult the IBM support page directly for applicable fix levels. As a compensating control prior to patching, restrict authenticated network access to AIX and PowerVM VIOS management interfaces using host-based firewalls (IPFilter on AIX) or perimeter ACLs, since the flaw requires PR:L network-reachable access; note that this control does not eliminate risk for internal threat actors with valid credentials. Monitoring authentication logs for unexpected low-privilege sessions targeting management services may provide early warning of attempted exploitation.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today