An integer overflow occurs in the IBM i Save Restore functionality, allowing a remote authenticated attacker to trigger a denial of service by causing the system to crash or reboot. The flaw is classified as CWE‑190. No compromise of data confidentiality or integrity is explicitly described, and the impact is limited to service availability.

IBM i releases 7.6, 7.5, 7.4, and 7.3 are affected. IBM published patch Feature Profile Toolkit pairs: SJ11369 for 7.6, SJ11368 for 7.5, SJ11367 for 7.4, and SJ11366 for 7.3. The vulnerable components are identified by the CPE strings for those releases, and IBM recommends upgrading to a supported and fixed version of the product as part of the resolution.

The CVSS score of 4.3 denotes moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. According to the bug description, the attack vector is remote and requires the attacker to have authenticated credentials on the IBM i system; the integer overflow could be triggered by using the Save Restore feature. No evidence of public exploitation is provided, so the likelihood of exploitation remains uncertain based on the available data.