← Database

CVE-2025-23350

CRITICAL CVSS: 9.0 Published: 2026-07-01 Modified: 2026-07-01

Description

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

Affected Platforms

Unknown

Weakness Type

CWE-787

References