Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-33215

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA SNAP-4 Container

Default version status: unaffected

  • All versions prior to SNAP-4.9.1 and SNAP-4.5.5affected

References