CVE-2026-14970

Analyzed Analyzed - Analysis Complete

Buffer Overflow in IBM AIX and PowerVM VIOS NIM Server

Publication date: 2026-08-19

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-20

Generated

2026-09-09

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-14970

EUVD

EUVD-2026-62516

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	vios	From 4.1.0 (inc) to 4.1.0.50 (exc)
ibm	vios	From 4.1.1.0 (inc) to 4.1.1.30 (exc)
ibm	vios	From 4.1.2.0 (inc) to 4.1.2.20 (exc)
ibm	aix	From 7.2.5 (inc) to 7.2.5.212 (inc)
ibm	aix	From 7.3.2 (inc) to 7.3.2.5 (inc)
ibm	aix	From 7.3.3 (inc) to 7.3.3.2 (inc)
ibm	aix	From 7.3.4 (inc) to 7.3.4.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM server crashes during client registration due to a buffer overflow in the NIM server process.

Detection Guidance

Detection requires monitoring for crashes in the NIM server process during client registration. Check system logs for AIX/PowerVM VIOS crashes and buffer overflow errors. Monitor network traffic for unusual client registration patterns.

Impact Analysis

The buffer overflow may cause the NIM server to crash, leading to service disruption for client registrations and potential denial of service.

Compliance Impact

The provided CVE data does not include specific details about compliance impacts on standards like GDPR or HIPAA. The vulnerability involves a buffer overflow causing crashes in IBM AIX and PowerVM VIOS NIM server processes, which could potentially lead to service disruption but lacks explicit compliance-related consequences in the given context.

Mitigation Strategies

Apply IBM AIX and PowerVM VIOS security patches or updates as soon as they are available. Monitor IBM support pages for advisories related to NIM server crashes and buffer overflow issues.

Hi! I’m here to help you understand CVE-2026-14970. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70