CVE-2026-17141: CWE-787 Out-of-bounds Write in IBM AIX

This vulnerability is an out-of-bounds write (buffer overflow) in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It allows remote code execution by an unauthenticated attacker due to improper bounds checking in affected components. The CVSS 3.1 vector indicates the attack can be performed remotely with low complexity, no privileges, and no user interaction, resulting in complete compromise of the affected system.

Successful exploitation could lead to arbitrary code execution by a remote attacker, resulting in full system compromise including confidentiality, integrity, and availability impacts. This could allow attackers to execute malicious code, disrupt services, or gain unauthorized access to sensitive information on affected IBM AIX and PowerVM VIOS systems.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to affected systems and monitor for unusual activity. Do not assume the vulnerability is mitigated without vendor confirmation.