AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-19234

IBM Power Systems Firmware: stack buffer overflow

IBM

CVE-2026-19234 · Published Aug 19, 2026 · updated Aug 26, 2026

High8.2
No fix yet
IBM advisory

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

Affected versions

PackageAffectedFixed in
Power Systems Firmware
Product
<= FW1120.00No fix yet
>= FW1110.00, <= FW1110.30No fix yet
>= FW1060.00, <= FW1060.80No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-121

More IBM advisories

All IBM