Jiaqing Huang

Name of the Vulnerable Software and Affected Versions: VMware ESXi (affected versions not specified) Description: The issue is related to an out-of-bounds read, which can be triggered by a malicious actor with local administrative privileges on a virtual machine that has an existing snapshot. This can lead to a denial-of-service condition of the host. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The storage controllers on VMware ESXi, Workstation, and Fusion have an out-of-bounds read/write issue. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

A use-after-free vulnerability in the XHCI USB controller of VMware products allows a malicious actor with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox, whereas on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.

The issue is related to an information disclosure vulnerability in the UHCI USB controller of the affected software. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process. This vulnerability is associated with a lack of protection for service data, which could allow an attacker to disclose protected information.

The issue is related to an out-of-bounds read vulnerability in the USB CCID (chip card interface device) of VMware Workstation and Fusion. A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read, leading to information disclosure.