CVE-2025-62624 | BDVDB-2026-332821 Detail
AMDESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products
Description#
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-122 Heap-based Buffer Overflow
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.