An out‑of‑bounds write in IBM DataPower Gateway allows a remote attacker to read sensitive data and, in some cases, cause a denial of service. This flaw is a classic example of a buffer overflow (CWE‑787). The vulnerability can lead to disclosure of configuration or traffic data and can interrupt normal gateway operation, impacting availability.

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2 are affected. All affected releases are listed in the official IBM advisory.

The CVSS score is 8.6, indicating a high severity level. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector is remote over the network, requiring network access to the gateway. An attacker could exploit the flaw via a crafted request or a benign request that triggers the buffer overflow, leading to sensitive data leakage or a service crash.