Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-23350

Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enables Local Arbitrary Code Execution

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Bluefield Ga Bluefield Lts22 Bluefield Lts23 and 5 more
CVE-2025-23351

Local Arbitrary Code Execution via Out‑Of-Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Bluefield Ga Bluefield Lts22 Bluefield Lts23 and 7 more