Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, pote

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products

Default version status: affected

  • ESXi 8.0U3i, included in VCF 5.2.3.0 or 9.0.2 releasesunaffected

References