IBM i versions 7.3 through 7.6 contain an out-of-bounds read vulnerability (CWE-125) that can be exploited remotely without authentication or user interaction. This flaw allows an attacker to read memory beyond intended boundaries, which may lead to disclosure of sensitive information and partial denial of service. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No vendor advisory or patch information is currently available.

An attacker can remotely exploit this vulnerability to read memory outside of authorized bounds, potentially exposing sensitive information and causing partial service disruption. The impact affects confidentiality and availability but does not affect integrity. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation has been announced by IBM as of the publication date.