This vulnerability, identified as CWE-125 (Out-of-bounds Read), affects IBM i operating system versions 7.3 through 7.6. It allows a remote attacker with authentication privileges to read memory outside the intended bounds, potentially exposing sensitive information or causing a denial of service condition. The CVSS 3.1 base score is 5.4, reflecting a medium impact with network attack vector, low attack complexity, and no user interaction required. The vulnerability does not impact integrity but affects confidentiality and availability. No vendor advisory or patch information is currently available.

An attacker who is remotely authenticated could exploit this vulnerability to read memory beyond intended boundaries, potentially gaining access to sensitive information or causing the system to crash, resulting in denial of service. The impact on confidentiality is limited, and integrity is not affected. Availability impact is low but present due to possible denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor IBM's security advisories for updates. No specific mitigation steps are provided by the vendor at this time.