CVE-2026-14970
Received Received - Intake

Buffer Overflow in IBM AIX and PowerVM VIOS NIM Server

Vulnerability report for CVE-2026-14970, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ibm aix 7.2
ibm aix 7.3
ibm powervm_vios 4.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM server crashes during client registration due to a buffer overflow in the NIM server process.

Impact Analysis

The buffer overflow may cause the NIM server to crash, leading to service disruption for client registrations and potential denial of service.

Compliance Impact

The provided CVE data does not include specific details about compliance impacts on standards like GDPR or HIPAA. The vulnerability involves a buffer overflow causing crashes in IBM AIX and PowerVM VIOS NIM server processes, which could potentially lead to service disruption but lacks explicit compliance-related consequences in the given context.

Mitigation Strategies

Apply IBM AIX and PowerVM VIOS security patches or updates as soon as they are available. Monitor IBM support pages for advisories related to NIM server crashes and buffer overflow issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14970. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart