IBM i versions 7.3 through 7.6 contain an out-of-bounds read vulnerability (CWE-125) that can be exploited by a remote authenticated attacker. Exploitation could lead to denial of service and limited information disclosure. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low complexity, required privileges, no user interaction, and partial confidentiality and availability impacts. No vendor advisory or patch is currently available to confirm remediation status.

Successful exploitation allows a remote authenticated attacker to cause denial of service and obtain sensitive information from the affected IBM i systems. The confidentiality impact is limited, integrity is not affected, and availability impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for vendor updates and apply patches promptly once available.