CVE-2025-23350
CRITICAL SEVERITYCVSS Score & Metrics
Base Score
9.0 / 10
Vector String
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Description
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-787
Source
NVD
Vendor
NVIDIA
Product
BlueField GA, BlueField LTS22, BlueField LTS23, BlueField LTS24, ConnectX GA, ConnectX LTS22, ConnectX LTS23, ConnectX LTS24
Discussion (0)
Add Comment
No comments yet. Be the first!