8.4

CVE-2026-11885

Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Power System E980 (9080-m9s) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System L922 (9008-22l) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S922 (9009-22a) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S922 (9009-22g) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System H922 (9223-22h) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System H922 (9223-22s) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S914 (9009-41a) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S914 (9009-41g) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S924 (9009-42a) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System S924 (9009-42g) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System H924 (9223-42h) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System H924 (9223-42s) Firmware Version >= fw950.00 < fw950.h2
Ibm ≫ Power System E950 (9040-mr9) Firmware Version >= fw950.00 < fw950.h2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.011
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 8.4 2 5.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.ibm.com/support/pages/node/7280628
Vendor Advisory