IBM MQ contains an integer overflow or wraparound vulnerability (CWE-190) in its distribution list processing component. This flaw could be exploited by an authenticated attacker to trigger denial of service conditions or potentially execute arbitrary code. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability affects specific IBM MQ versions 9.1.0.0 through 10.0.0.0. No known exploits in the wild have been reported, and no vendor advisory or patch information is currently available.

Successful exploitation could lead to denial of service or arbitrary code execution, impacting system availability, confidentiality, and integrity. The attacker must be authenticated but requires no user interaction and can exploit the vulnerability remotely over the network with low complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to IBM MQ to trusted users and monitor for unusual activity related to distribution list processing.