IBM MQ contains an integer overflow vulnerability (CWE-190) in the processing of MQINQ requests. An authenticated attacker could exploit this flaw to trigger a denial of service or potentially execute arbitrary code. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, and requiring privileges but no user interaction. The affected versions are exactly 9.1.0.0, 9.2.0.0, 9.3.0.0, 9.4.0.0, and 10.0.0.0. There is no vendor advisory or patch information provided, so patch status is unknown.

Successful exploitation could lead to denial of service or arbitrary code execution, impacting confidentiality, integrity, and availability of the IBM MQ service. The attacker must be authenticated to exploit this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated access to IBM MQ and monitor for suspicious activity related to MQINQ requests.