This vulnerability (CWE-770) in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 arises from improper validation of an array size field. A remote attacker could exploit this flaw to cause a denial of service condition by triggering uncontrolled resource allocation. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). No official patch or remediation level has been published yet.

Successful exploitation results in denial of service due to resource exhaustion caused by improper array size validation. There is no confidentiality or integrity impact reported. The vulnerability can be triggered remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for unusual resource consumption patterns related to array allocations and consider applying any vendor-recommended workarounds once published.