Snap-4 Container CVEs and Security Vulnerabilities

CVE-2025-33215

VIRTIO-BLK Out-of-Range Pointer Offsets Cause Storage Denial of Service in NVIDIA SNAP-4 Container

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Nvidia

Products

Snap-4 Container

CVE-2025-33216

Buffer Size Miscalculation in NVIDIA SNAP‑4 Container Leading to Denial of Service

NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation of buffer size by sending crafted configurations. A successful exploit of this vulnerability may lead to crash of the SNAP service, causing denial of service of the storage service to the host.