The vulnerability is an out-of-bounds write in the Hitachi Disk Array Driver modules for AIX and Virtual I/O Server. The flaw could allow an attacker to overwrite adjacent memory locations within the driver context, potentially corrupting critical data structures or causing system instability. The weakness is classified as CWE‑787.

Hitachi Disk Array Driver for AIX versions from 01‑00 up to 01‑22 (before 01‑23‑/A) and Hitachi Disk Array Driver for Virtual I/O Server versions from 01‑04 up to 01‑22 (before 01‑23‑/A) are affected. All later releases, including 01‑23‑/A and beyond, contain the fix.

With a CVSS score of 5.1 the flaw is considered medium severity. The EPSS score of less than 1% indicates a very low current likelihood of exploitation, and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that exploitation would require local or privileged access to inject crafted data into the driver, possibly via administrative tools or management interfaces that load the driver.