CVE-2025-23351
Local Arbitrary Code Execution via Out‑Of-Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVSS 3.1 · 9 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products