IBM i versions 7.3, 7.4, 7.5, and 7.6 contain an out-of-bounds read vulnerability (CWE-125) that could be exploited by a remote attacker with valid authentication to access sensitive information. The CVSS 3.1 base score is 5.4, reflecting a medium severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality and availability but not integrity. There is no vendor-provided remediation level or patch information at this time.

A remote authenticated attacker could exploit this vulnerability to read memory outside of intended bounds, potentially exposing sensitive information. The impact affects confidentiality (partial information disclosure) and availability (low impact), but does not affect integrity. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor IBM advisories for updates and consider limiting remote authenticated access to affected IBM i versions as a precaution.