CVE-2026-17270

Analyzed Analyzed - Analysis Complete

Stack-Based Buffer Overflow in IBM i

Publication date: 2026-09-04

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-10

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-24

NVD

CVE-2026-17270

EUVD

EUVD-2026-71478

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow vulnerability in IBM i operating systems versions 7.6, 7.5, 7.4, and 7.3. A local attacker could exploit this to cause a denial of service by overflowing a buffer on the stack.

Detection Guidance

This vulnerability is specific to IBM i systems and involves a stack-based buffer overflow. Detection would require checking IBM i system logs for unusual activity or crashes, particularly after applying updates. Commands like DSPLOG or WRKLOG can review system logs for errors. However, IBM has not provided specific detection commands in the given context.

Impact Analysis

A local attacker could exploit this to crash the system, causing service disruption. Since it requires local access, remote exploitation is not possible. The impact is limited to availability of the affected IBM i system.

Compliance Impact

This vulnerability causes a denial of service due to a stack-based buffer overflow, which could disrupt system availability. Compliance with standards like GDPR or HIPAA may be affected if the system's availability is compromised, potentially impacting data processing or access. However, specific compliance impacts depend on system usage and environment.

Mitigation Strategies

Apply IBM i PTFs or updates provided by IBM to address the stack-based buffer overflow issue. Monitor IBM PSIRT advisories for patches and test fixes in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-17270. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70