Skip to content
OpenAdvisories
High · 8.2 CVE-2026-19234 EUVD-2026-62674GHSA-gxcw-mv6h-cx89

Power System Buffer Overflow

Published Aug 19, 2026 · Updated Aug 21, 2026 · Assigned by ibm

Description

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful exploitation could result in a confidentiality, integrity, and availability impact to the affected host system.

Affected products

VendorProductAffectedFixed
IBM Power Systems Firmware FW1120.00, FW1110.00 – ≤ FW1110.30, FW1060.00 – ≤ FW1060.80 —

References