PT-2026-54609

CVE-2025-23351

·

Published

2026-07-01

·

Updated

2026-09-30

Description by

CVSS 3.1
9.0
Critical
MetricsAV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NVIDIA ConnectX (affected versions not specified) NVIDIA BlueField (affected versions not specified)
Description A flaw exists in the command interface that allows a local user with virtual function (VF) access to trigger a write out of bounds by providing crafted input. This condition can lead to arbitrary code execution on the device.
Recommendations Apply the latest security patches for NVIDIA ConnectX. Apply the latest security patches for NVIDIA BlueField.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2025-23351
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com