IBM PowerVM Hypervisor versions FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 contain a stack-based buffer overflow vulnerability (CWE-121) in the host firmware configuration parsing component. An attacker with authenticated service-level access to the service processor can exploit this by submitting specially crafted configuration data, causing a crash of the host firmware boot stack and possible memory corruption during system initialization. This results in compromised system integrity and availability. The CVSS 3.1 base score is 7.3, reflecting high severity with local attack vector, low complexity, low privileges required, no user interaction, and a scope change.

The vulnerability can cause the host firmware boot stack to crash with possible memory corruption during system initialization. This leads to an integrity and availability impact on the managed system. There is no confidentiality impact reported. Exploitation requires authenticated service-level access, and no known exploits are currently in the wild.

No patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated service-level access to trusted administrators only to reduce risk.