EUVD-2026-62750
GHSA-84mv-7973-x7m2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Stack overflow described as remote arbitrary code execution with no stated auth or interaction, so AV:N/PR:N/UI:N and full C:H/I:H/A:H; AC:L retained absent evidence of exploitation hurdles.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
AnalysisAI
Remote code execution in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 stems from a stack buffer overflow (CWE-787) that a network-based attacker can trigger without authentication or user interaction, per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N). IBM has published a fix, and no public exploit has been identified at time of analysis, though the 9.8 base score reflects full compromise of confidentiality, integrity, and availability. The exact vulnerable service/daemon is not disclosed in the available data, which limits precise attack-surface scoping.
Technical ContextAI
The affected platforms are IBM's proprietary AIX Unix operating system (versions 7.2 and 7.3) and PowerVM Virtual I/O Server (VIOS 4.1), both running on IBM Power (POWER) hardware; VIOS is the virtualization appliance that provides shared storage and network I/O to LPAR partitions, so a compromise there can affect multiple hosted guests. The root cause is CWE-787 (out-of-bounds write) manifesting specifically as a stack-based buffer overflow: attacker-influenced input is copied into a fixed-size stack buffer without adequate bounds checking, corrupting the return address or adjacent stack data and enabling control-flow hijack. The CPE data (cpe:2.3:a:ibm:aix and cpe:2.3:a:ibm:powervm_vios) confirms both products share the vulnerable code path, suggesting a common library or network-facing service component reused across AIX and VIOS.
RemediationAI
Patch available per vendor advisory: apply the IBM-supplied fix referenced at https://www.ibm.com/support/pages/node/7283858, which covers AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 (consult the advisory for the exact iFix/APAR and TL/SP level matching your installation, as those specific version identifiers are not included in the provided data). Because this is unauthenticated network RCE, if immediate patching is not possible, reduce exposure of the affected Power systems by restricting network reachability of the affected service - place AIX/VIOS management and service interfaces behind firewall ACLs limited to trusted administrative subnets, and for VIOS in particular isolate the management network from general LAN/internet reach; the trade-off is that overly broad ACLs can disrupt legitimate I/O virtualization or administrative traffic, so scope rules to the specific hosts and ports involved. Prioritize VIOS remediation given its role serving multiple client LPARs.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today