EUVD-2026-62748
GHSA-r7x9-3h4v-9mc9
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Local access and low privileges required to trigger heap overflow; impact is availability-only crash with no data exposure or integrity modification.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.
AnalysisAI
Heap buffer overflow in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 enables a local low-privileged attacker to crash the system, resulting in a denial of service. The flaw is rooted in improper bounds checking during heap memory operations (CWE-787). No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, a vendor-released patch is available via IBM advisory node/7283858.
Technical ContextAI
CWE-787 (Out-of-bounds Write) indicates a heap buffer overflow - a class of memory corruption where a write operation exceeds the allocated heap buffer boundary, potentially overwriting adjacent memory structures. IBM AIX is a proprietary Unix-based operating system running on IBM Power hardware, widely deployed in enterprise environments for workloads requiring high reliability. IBM PowerVM VIOS (Virtual I/O Server) version 4.1 is the virtualization management layer on IBM Power systems, providing I/O virtualization services to logical partitions (LPARs). Both products share the same underlying Power architecture. Affected CPE entries are cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* (versions 7.2 and 7.3) and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* (version 4.1). The wide CPE wildcard versions suggest the flaw spans all sub-releases within those major versions until the patch is applied.
RemediationAI
A vendor-released patch is available per IBM advisory at https://www.ibm.com/support/pages/node/7283858; administrators should consult that page for the exact fix version and applicable APARs. The input data does not specify an exact patched version number, so the IBM advisory must be consulted directly to identify the correct fix package for each AIX and VIOS release level. As a compensating control until patching is complete, restrict local interactive access to IBM AIX and VIOS systems by enforcing strict PAM controls and limiting shell access to only operationally necessary accounts - this reduces the exploitable user population without affecting system function. On VIOS systems specifically, auditing LPAR user privilege assignments to minimize low-privilege accounts with shell access is advisable. Note that restricting shell access does not eliminate the vulnerability if other local execution paths exist; patching remains the definitive remediation.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today