EUVD-2026-62753
GHSA-6j8x-gqfv-mg99
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
OOB read warrants C:L for potential memory disclosure per tags; I:N because OOB read does not modify data; AC:H and AV:N retained consistent with provided vector.
Primary rating from Vendor (ibm).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Lifecycle Timeline
2DescriptionNVD
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
AnalysisAI
Out-of-bounds read (CWE-125) in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 exposes a remotely reachable attack surface that allows unauthenticated network attackers to cause a denial of service under high-complexity conditions. The CVSS vector also records a limited integrity impact (I:L), which is inconsistent with the description's exclusive mention of denial of service and warrants verification against the vendor advisory. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS vector (AV:N/AC:H/PR:N/UI:N) confirms the vulnerability is reachable over the network without authentication and without requiring user interaction, but exploitation demands high attack complexity - the attacker must satisfy specific preconditions such as a race condition, precise protocol state, or timing-dependent trigger. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.8 Medium score is primarily shaped by the High Attack Complexity (AC:H) modifier, which meaningfully suppresses practical exploitability even though the attack vector is network-based and requires no authentication or user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A remote unauthenticated attacker sends specially crafted network packets to a listening service on an IBM AIX or PowerVM VIOS system, triggering the out-of-bounds read condition after satisfying the high-complexity prerequisite (such as a specific protocol state or timing window). If successful, the target service crashes or enters an abnormal state, producing a denial of service; potential memory leakage adjacent to the read boundary could also expose limited data. … |
| Remediation | Apply the IBM-provided patch referenced in the security bulletin at https://www.ibm.com/support/pages/node/7283858, which should contain the specific PTF (Program Temporary Fix) identifiers or APAR numbers for AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 - exact fixed version numbers must be retrieved from that advisory, as they are not included in available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improp
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Remote code execution in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 allows an unauthenticated remote attacker to run a
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today