CVE Catalog

CVE-2026-18102

LowCVSS 3.5
Published: Translated: NVD NIST

Summary

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.

Risk Assessment

Memory overwrite could lead to system crash, arbitrary code execution, or privilege escalation, posing a serious threat to system integrity.

Recommendation

Apply the patches provided by IBM for the affected versions of IBM i. Restrict system access to trusted users only.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS