This vulnerability (CWE-125) arises from an integer underflow in the IPv4 IP-options parser in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. The flaw allows a remote attacker to trigger an out-of-bounds read condition, potentially exposing sensitive information. The CVSS v3.1 score is 9.4 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No official remediation or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could allow a remote attacker to obtain sensitive information due to out-of-bounds memory reads caused by an integer underflow in the IPv4 IP-options parser. The vulnerability impacts confidentiality, integrity, and availability, making it critical in severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor IBM advisories for updates. No vendor-provided mitigation or temporary fix is currently documented.