Description
VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a VMware Workstation
Default version status: unaffected
17.x to < 17.5.1affected
n/a VMware Fusion
Default version status: unaffected
13.x to < 13.5.1affected