CVE-2025-23351
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted in…
Published: 2026-07-01 · CVSS: 9.0 · CVSS 3.1
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7