This vulnerability (CWE-120) involves a classic buffer overflow in the NIM server process of IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. Specifically, the server crashes during client registration because it copies data into a buffer without verifying the input size, leading to memory corruption and process termination. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service).

Successful exploitation results in a denial of service condition by crashing the NIM server process during client registration. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the NIM server process to trusted networks to reduce exposure.