CVE-2026-86573

Deferred Deferred - Pending Action

Out-of-bounds Write in Hitachi Disk Array Driver

Publication date: 2026-10-14

Last updated on: 2026-10-18

Assigner: Hitachi, Ltd.

Description

Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-18

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-86573

EUVD

EUVD-2026-100773

Affected Vendors & Products

Vendor	Product	Version / Range
Hitachi	Hitachi	Disk Array Driver for AIX 01-00
Hitachi	Hitachi	Disk Array Driver for Virtual I/O Server 01-04

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in the Hitachi Disk Array Driver for AIX and Virtual I/O Server. It allows attackers with local access to write beyond allocated memory boundaries, potentially corrupting data or executing arbitrary code.

Detection Guidance

Detection requires checking the installed version of Hitachi Disk Array Driver for AIX or Virtual I/O Server. Compare the version against the affected ranges (01-00 to 01-23-/A). If the version is within this range, the system is vulnerable.

Impact Analysis

An attacker could exploit this to crash systems, corrupt data, or gain elevated privileges on affected systems running the vulnerable driver versions.

Compliance Impact

This vulnerability is an out-of-bounds write issue in Hitachi Disk Array Driver for AIX and Virtual I/O Server. It could allow unauthorized data modification or system crashes, potentially violating integrity and availability requirements in compliance standards like GDPR and HIPAA. However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Upgrade Hitachi Disk Array Driver for AIX to version 01-23-/A or later and Hitachi Disk Array Driver for Virtual I/O Server to version 01-23-/A or later to address the out-of-bounds write vulnerability.

Hi! I’m here to help you understand CVE-2026-86573. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70