EUVD-2026-62864
GHSA-9467-h86m-9p84
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description states remote arbitrary code execution via stack overflow with no stated auth or interaction, so AV:N/AC:L/PR:N/UI:N and full C/I/A impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
AnalysisAI
Remote code execution in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 allows an unauthenticated remote attacker to run arbitrary code by triggering a stack-based buffer overflow, per the vendor-assigned CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N. IBM (the reporting party) has published a fix, and no public exploit identified at time of analysis. EPSS and KEV signals were not provided, so the 9.8 CVSS score is currently the strongest available severity indicator.
Technical ContextAI
The affected technology is IBM's proprietary AIX UNIX operating system and the PowerVM Virtual I/O Server (VIOS), which brokers storage and network virtualization for logical partitions on IBM Power hardware. The root cause is classified as CWE-121 (Stack-based Buffer Overflow), meaning a fixed-size buffer allocated on the call stack is written past its bounds, corrupting adjacent stack data such as saved return addresses and enabling control-flow hijack. The CPE strings cpe:2.3:a:ibm:aix and cpe:2.3:a:ibm:powervm_vios identify the two affected IBM products; the network attack vector implies the overflow is reachable through a network-exposed service or daemon on these systems, though the specific listening component is not named in the available data.
RemediationAI
Apply the vendor fix referenced in IBM support advisory https://www.ibm.com/support/pages/node/7283858 (Patch available per vendor advisory); the IBM page provides the specific interim fixes or APAR/service-pack levels for AIX 7.2, AIX 7.3, and VIOS 4.1, which should be installed on all affected systems since the input does not disclose an exact tagged fix version to cite here. Until patches are applied, reduce exposure of the vulnerable network-facing service by restricting reachability with host and network firewall rules so that only trusted management networks can reach AIX and VIOS listening ports, and place VIOS management interfaces on isolated administrative VLANs; note that tightening firewall access to VIOS-served network/storage paths can disrupt partition connectivity, so validate rules against operational dependencies before enforcing. Because the exact vulnerable daemon is not named in the available data, confirm the precise service and any vendor-recommended workaround directly from the IBM advisory.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-121 – Stack-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today