IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain an out-of-bounds read vulnerability (CWE-125) that can be exploited by a remote authenticated attacker. This vulnerability may lead to unauthorized disclosure of sensitive information or cause a denial of service condition. The CVSS 3.1 base score is 7.9, indicating high severity, with attack vector local, low attack complexity, no privileges required, no user interaction, and scope changed. The vulnerability is published but no official remediation or patch information is available at this time.

An attacker with remote authenticated access could exploit this out-of-bounds read vulnerability to gain access to sensitive information or disrupt service availability by causing a denial of service. The impact on confidentiality is limited to partial information disclosure, while integrity is not affected. Availability impact is high due to potential denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided by IBM at this time. Users should monitor IBM security advisories for updates and apply patches once available.