EUVD-2026-62751
GHSA-84pc-jr2g-4x38
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description states a remote attacker achieves arbitrary code execution via stack overflow, implying unauthenticated network reach (AV:N/PR:N/UI:N), low complexity, and full C/I/A impact on the same system.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
AnalysisAI
Remote code execution in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 lets a remote attacker overflow a stack buffer (CWE-787 out-of-bounds write) and run arbitrary code on the affected Power-based host. The flaw was reported by IBM, carries a critical 9.8 CVSS rating with a network, no-privilege, no-interaction vector, and a vendor patch is available; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Technical ContextAI
AIX is IBM's proprietary Unix operating system for POWER-architecture servers, and PowerVM VIOS (Virtual I/O Server) is the special-purpose AIX-derived appliance that virtualizes storage and network resources for LPARs on the same platform - meaning both affected products share a common code lineage, which is consistent with a single memory-corruption defect surfacing across all three listed versions (CPE cpe:2.3:a:ibm:aix and cpe:2.3:a:ibm:powervm_vios). The root cause is CWE-787 (out-of-bounds write) manifesting specifically as a stack buffer overflow: a network-reachable service copies attacker-influenced data into a fixed-size stack buffer without adequate bounds checking, allowing corruption of adjacent stack memory including saved return addresses or control data, which is the classic primitive for hijacking execution flow.
RemediationAI
Patch available per vendor advisory - apply the IBM-provided fix referenced at https://www.ibm.com/support/pages/node/7283858, which lists the specific APAR/ifix or fix-pack level for each affected AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 technology level (the exact patched build is not stated in the source data and should be taken directly from that advisory rather than assumed). Because the vulnerable network service is not named in the public description, the most effective compensating control until patching is to restrict network reachability of the affected hosts - place AIX and VIOS management/service interfaces behind firewalls or ACLs so they are reachable only from trusted administrative networks, which limits the AV:N exposure at the cost of constraining remote administration and any legitimate cross-network service consumers; on VIOS in particular, ensure the management LPAR/HMC network is isolated from general user or internet-facing segments, accepting the operational overhead of tighter segmentation.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today