CVE-2026-18341: CWE-122 Heap-based Buffer Overflow

CVE-2026-18341 is a heap-based buffer overflow vulnerability in IBM i operating system versions 7.3 through 7.6. The flaw arises due to an integer underflow condition that can lead to memory corruption when exploited by a remote attacker with authentication privileges. The vulnerability has a CVSS 3.1 base score of 6.3, reflecting a medium severity with network attack vector, low attack complexity, and requiring privileges but no user interaction. No vendor advisory or patch information is provided, and there are no known exploits in the wild at this time.

Successful exploitation could allow a remote authenticated attacker to corrupt memory, potentially leading to denial of service or limited information disclosure or integrity impact. The CVSS vector indicates low confidentiality and integrity impact but high availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit remote authenticated access to affected IBM i versions and monitor for unusual system behavior related to memory corruption.