CVE-2026-18102: IBM i Buffer Overflow
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.
Other sources
IBM i could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch MJ10886 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch MJ10885 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch MJ10884 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch MJ10883
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running IBM i 7.3, 7.4, 7.5, or 7.6 are identified as affected. Exploitation requires remote access and authentication.
What level of access does an attacker need?
An attacker must be remotely authenticated and have low privileges. No user interaction is required.
What is the potential impact?
Successful exploitation could allow an attacker to overwrite adjacent memory, resulting in integrity impact. The provided severity vector indicates no confidentiality or availability impact.