AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-14970

IBM AIX: buffer overflow

IBM

CVE-2026-14970 · Published Aug 19, 2026 · updated Oct 27, 2026

High7.5
No fix yet
IBM advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.

Affected versions

PackageAffectedFixed in
AIX
Product
<= 7.2No fix yet
<= 7.3No fix yet
PowerVM VIOS
Product
<= 4.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-120

More IBM advisories

All IBM
High 7.4Aug 19IBM DS8A00 (R10.0 - R10.1): information disclosureCVE-2025-36254no fix yetHigh 7.5Aug 19IBM DS8A00: authenticated user could create a user with privileged userCVE-2025-36255no fix yetMedium 5.4Aug 19IBM DS8A00: authenticated user could read or modify another user'sCVE-2025-36398no fix yetMedium 5.1Aug 19IBM PowerVM Hypervisor Platform KeyStoreCVE-2026-4936no fix yetMedium 5.3Aug 19IBM PowerVM Hypervisor: local attacker could decrypt encrypted dataCVE-2026-4937no fix yetMedium 5.5Aug 19IBM go-slug: local attacker could bypassCVE-2026-14978no fix yet