CVE-2026-16839

Published: Aug 19, 2026Modified: Aug 24, 2026

9.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Exploitability: 3.9 / Impact: 5.5

Source: psirt@us.ibm.com (Secondary)

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

Affected (7)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5 to 7.2.5.212
Ibm Aix	From 7.3.2 to 7.3.2.5
Ibm Aix	From 7.3.3 to 7.3.3.2
Ibm Aix	From 7.3.4 to 7.3.4.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	From 4.1.0 to 4.1.0.50
Ibm Vios	From 4.1.1.0 to 4.1.1.30
Ibm Vios	From 4.1.2.0 to 4.1.2.20

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.ibm.com/support/pages/node/7283858

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.