EUVD-2026-62753
GHSA-6j8x-gqfv-mg99
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
OOB read warrants C:L for potential memory disclosure per tags; I:N because OOB read does not modify data; AC:H and AV:N retained consistent with provided vector.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
AnalysisAI
Out-of-bounds read (CWE-125) in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 exposes a remotely reachable attack surface that allows unauthenticated network attackers to cause a denial of service under high-complexity conditions. The CVSS vector also records a limited integrity impact (I:L), which is inconsistent with the description's exclusive mention of denial of service and warrants verification against the vendor advisory. No public exploit code or active exploitation has been identified; a vendor patch is available from IBM.
Technical ContextAI
The vulnerability is rooted in CWE-125 (Out-of-Bounds Read), a memory-safety defect in which a program reads data beyond the boundary of an allocated buffer, potentially crashing the process or leaking adjacent memory. IBM AIX is a Unix-based operating system running on IBM Power hardware, used heavily in enterprise, financial, and government environments. PowerVM VIOS (Virtual I/O Server) is the IBM virtualization layer that mediates I/O between guest logical partitions (LPARs) and physical hardware - making it a high-value availability target in virtualized IBM Power environments. The affected CPEs are cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* (covering AIX 7.2 and 7.3) and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* (VIOS 4.1). The network attack vector (AV:N) implies the defect exists in a listening network service or protocol parser within these platforms, though the specific service is not identified in available intelligence.
RemediationAI
Apply the IBM-provided patch referenced in the security bulletin at https://www.ibm.com/support/pages/node/7283858, which should contain the specific PTF (Program Temporary Fix) identifiers or APAR numbers for AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 - exact fixed version numbers must be retrieved from that advisory, as they are not included in available intelligence. As a compensating control prior to patching, restrict network access to the specific listening service involved using host-based firewall rules (IPFilter on AIX) or perimeter controls, limiting exposure to trusted source addresses only; note this may impact legitimate connectivity to the affected service and requires identification of the vulnerable service from the IBM advisory. For PowerVM VIOS deployments, ensure management interfaces (HMC, VIOS console) are not reachable from untrusted network segments, as VIOS availability directly affects all hosted LPARs.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today