Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-33207

Control Register Access‑Control Bypass in NVIDIA ConnectX and BlueField Firmware Leading to Denial of Service

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Bluefield Ga Bluefield Lts23 Bluefield Lts24 and 4 more
CVE-2025-23350

Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enables Local Arbitrary Code Execution

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Bluefield Ga Bluefield Lts22 Bluefield Lts23 and 5 more
CVE-2025-23351

Local Arbitrary Code Execution via Out‑Of-Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Bluefield Ga Bluefield Lts22 Bluefield Lts23 and 7 more