EUVD-2026-62720
GHSA-v4w4-xvfv-6hg4
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Network-accessible unauthenticated out-of-bounds read in the kernel leaks partial memory; no integrity or availability impact applies to this read-only disclosure flaw.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.
AnalysisAI
Kernel memory disclosure in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 exposes internal kernel memory to remote unauthenticated attackers via an out-of-bounds read (CWE-125). The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N confirms network-accessible, zero-prerequisite exploitation, though impact is bounded to partial confidentiality loss with no integrity or availability consequences. No public exploit or active exploitation has been identified at time of analysis; IBM has released a patch via advisory at https://www.ibm.com/support/pages/node/7283858.
Technical ContextAI
CWE-125 (Out-of-Bounds Read) describes a condition where software reads data beyond the allocated memory buffer boundary. In the context of the IBM AIX kernel and PowerVM VIOS - an enterprise UNIX operating system and its Virtual I/O Server component running on IBM Power hardware - this class of flaw can cause the kernel to return memory contents from adjacent regions, potentially exposing kernel pointers, in-flight cryptographic material, process credentials, or other privileged data structures. The CPE identifiers cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* confirm the scope spans across IBM AIX major versions 7.2 and 7.3 and PowerVM VIOS 4.1, all of which run exclusively on IBM Power-series hardware. The 'Buffer Overflow' tag in the intelligence data is a colloquial categorization; the canonical classification is an out-of-bounds read, which does not grant write primitives and therefore does not directly enable code execution via this flaw alone.
RemediationAI
IBM has released a patch addressing this vulnerability; organizations should consult the vendor advisory at https://www.ibm.com/support/pages/node/7283858 for exact fix levels (Technology Level or Service Pack) applicable to AIX 7.2, 7.3, and PowerVM VIOS 4.1. The specific patched version number is not independently enumerated in the available intelligence data beyond 'patch available per vendor.' As a compensating control for systems where immediate patching is not feasible, administrators should restrict network access to IBM AIX and VIOS management interfaces and any exposed services at the perimeter and host-based firewall level, limiting reachability to trusted administrative networks only - this reduces the effective attack surface for the AV:N vector without disabling functionality. Note that network segmentation does not eliminate the vulnerability but raises the bar for exploitation by removing unauthenticated remote reach.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today