CVE-2025-23351
CRITICAL SEVERITYCVSS Score & Metrics
Base Score
9.0 / 10
Vector String
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Description
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-787
Source
NVD
Vendor
NVIDIA
Product
BlueField GA, BlueField LTS22, BlueField LTS23, BlueField LTS24, ConnectX GA, ConnectX LTS22, ConnectX LTS23, ConnectX LTS24, ConnectX-4, ConnectX-4 LX
Discussion (0)
Add Comment
No comments yet. Be the first!