CVE-2026-16825: CWE-787 Out-of-bounds Write in IBM AIX

This vulnerability (CVE-2026-16825) involves an out-of-bounds write (CWE-787) in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. A remote attacker with authentication privileges could exploit this flaw to leak sensitive information and disrupt service availability by causing a denial of service condition. The CVSS 3.1 base score is 4.2, reflecting a medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, limited confidentiality impact, no integrity impact, and limited availability impact.

The vulnerability allows a remote authenticated attacker to obtain sensitive information and cause denial of service on affected IBM AIX and PowerVM VIOS systems. The impact includes limited confidentiality loss and availability disruption. There is no indication of integrity compromise. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IBM security advisories for updates. Until a fix is available, limit remote authenticated access to trusted users and consider additional access controls to reduce exposure.