EUVD-2026-62735
GHSA-7c39-w5pm-p52w
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description states a remote attacker can execute arbitrary code via heap overflow with no stated auth or interaction, so AV:N/AC:L/PR:N/UI:N and full C/I/A impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
AnalysisAI
Remote code execution in IBM AIX 7.2/7.3 and IBM PowerVM VIOS 4.1 allows a remote attacker to run arbitrary code by triggering a heap buffer overflow (CWE-787 out-of-bounds write) in an affected network-facing component. The CVSS 9.8 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated, low-complexity network exploitation with full confidentiality, integrity, and availability impact. IBM has published a fix; no public exploit identified at time of analysis and no CISA KEV listing, so this is currently a high-severity but not confirmed-exploited issue.
Technical ContextAI
The vulnerability is a CWE-787 out-of-bounds write manifesting as a heap buffer overflow. Heap overflows occur when a program writes more data into a dynamically allocated buffer than it can hold, corrupting adjacent heap metadata or object pointers; on AIX/VIOS this corruption can be steered into control-flow hijack and arbitrary code execution. The affected platforms are IBM's enterprise UNIX operating system AIX (versions 7.2 and 7.3, CPE cpe:2.3:a:ibm:aix) and the PowerVM Virtual I/O Server (VIOS 4.1, CPE cpe:2.3:a:ibm:powervm_vios), which provides virtualized storage and network I/O to LPARs on IBM Power hardware. VIOS is itself built on an AIX base, which is consistent with the shared vulnerable code path across both products. The IBM advisory does not disclose the exact vulnerable service or protocol in the provided data.
RemediationAI
Patch available per vendor advisory - apply the IBM-provided fix/interim fix (iFix) referenced at https://www.ibm.com/support/pages/node/7283858 for the affected AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 levels; the provided data confirms a patch is available but does not name an exact fixed fileset version, so pull the precise APAR/iFix from that advisory and match it to your installed fileset level. Because this is an unauthenticated network-vector overflow, until the fix is deployed restrict network reachability of the affected hosts: place AIX/VIOS management and service interfaces on isolated management VLANs, apply host/network firewall rules to limit access to the affected service to trusted administrative sources only, and disable any non-essential network-facing services on VIOS. These network restrictions may impede legitimate remote administration and inter-LPAR I/O flows, so validate them against operational dependencies before enforcing.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today