Integer Overflow or Wraparound vulnerability allows a malicious actor to cause arithmetic overflow in critical code paths within IronOS. The error can corrupt memory or control data, which could lead to arbitrary code execution, privilege escalation or denial of service.

Affected product is Ralim IronOS firmware version 2.22 and earlier, prior to the release of v2.23-rc2. Systems running these older firmware builds are exposed.

The CVSS score of 9.8 classifies this vulnerability as critical. An EPSS score of less than 1% indicates low but non‑zero exploitation likelihood, and the issue is not listed in the CISA KEV catalog. The description does not specify an attack vector; based on the nature of integer overflows in networking stacks, it is inferred that exploitation could occur via malformed packets or inputs that trigger wraparound, possibly from remote sources if the vulnerable interfaces are reachable.