CVE-2026-17007

Received Received - Intake

Out-of-Bounds Read in IBM AIX and PowerVM VIOS

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-17007

EUVD

EUVD-2026-63637

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aix	7.2
ibm	aix	7.3
ibm	powervm_vios	4.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read issue in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It allows a local attacker to access sensitive information or cause a denial of service by exploiting memory access beyond allocated bounds.

Detection Guidance

This vulnerability is specific to IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. Detection involves checking the installed versions of these systems. Use commands like 'oslevel -s' for AIX or 'ioslevel' for VIOS to verify versions. If versions match affected releases, the system is potentially vulnerable.

Impact Analysis

As a local attacker, you could exploit this to read unauthorized data or crash the system, leading to service disruption. For end users, it may result in data leaks or system instability if the flaw is triggered.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive information. Organizations must patch systems to maintain compliance.

Mitigation Strategies

Apply IBM-provided patches or updates for AIX 7.2, 7.3, and PowerVM VIOS 4.1 to address the out-of-bounds read issue. Monitor IBM security advisories for fixes and restrict local access to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-17007. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70