CVE-2025-23351 - Vulnerability Details

CVE-2025-23351 - Local Arbitrary Code Execution via Out‑Of-Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Nvidia	Bluefield Ga Bluefield Lts22 Bluefield Lts23 Bluefield Lts24 Connectx-4 Connectx-4 Lx Connectx Ga Connectx Lts22 Connectx Lts23 Connectx Lts24

No data.

References

Link	Providers
https://github.com/NVIDIA/product-security/tree/main/2026/5699
https://nvd.nist.gov/vuln/detail/CVE-2025-23351
https://www.cve.org/CVERecord?id=CVE-2025-23351

History

Sat, 01 Aug 2026 23:45:00 +0000

Type	Values Removed	Values Added
Title		Local Arbitrary Code Execution via Out‑Of-Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface

Wed, 29 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Nvidia Nvidia bluefield Ga Nvidia bluefield Lts22 Nvidia bluefield Lts23 Nvidia bluefield Lts24 Nvidia connectx-4 Nvidia connectx-4 Lx Nvidia connectx Ga Nvidia connectx Lts22 Nvidia connectx Lts23 Nvidia connectx Lts24
Vendors & Products		Nvidia Nvidia bluefield Ga Nvidia bluefield Lts22 Nvidia bluefield Lts23 Nvidia bluefield Lts24 Nvidia connectx-4 Nvidia connectx-4 Lx Nvidia connectx Ga Nvidia connectx Lts22 Nvidia connectx Lts23 Nvidia connectx Lts24

Tue, 28 Jul 2026 16:15:00 +0000

Type	Values Removed	Values Added
Title	Out‑of‑Bounds Write Allowing Local Arbitrary Code Execution via Virtual Function Commands in NVIDIA ConnectX and BlueField

Fri, 24 Jul 2026 18:30:00 +0000

Type	Values Removed	Values Added
Title		Out‑of‑Bounds Write Allowing Local Arbitrary Code Execution via Virtual Function Commands in NVIDIA ConnectX and BlueField

Wed, 22 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Title	Out-of-Bounds Write in NVIDIA ConnectX/BlueField Virtual Function Command Interface

Fri, 17 Jul 2026 13:15:00 +0000

Type	Values Removed	Values Added
Title		Out-of-Bounds Write in NVIDIA ConnectX/BlueField Virtual Function Command Interface

Thu, 16 Jul 2026 12:15:00 +0000

Type	Values Removed	Values Added
Title	Out‑of‑Bounds Write in NVIDIA Device Virtual Function Command Interface Enables Local Arbitrary Code Execution

Tue, 14 Jul 2026 19:00:00 +0000

Type	Values Removed	Values Added
Title		Out‑of‑Bounds Write in NVIDIA Device Virtual Function Command Interface Enables Local Arbitrary Code Execution

Mon, 13 Jul 2026 15:45:00 +0000

Type	Values Removed	Values Added
Title	Out‑of‑Bounds Write via Virtual Function Command Interface Enables Local Arbitrary Code Execution on NVIDIA ConnectX and BlueField Devices

Sun, 12 Jul 2026 10:00:00 +0000

Type	Values Removed	Values Added
Title		Out‑of‑Bounds Write via Virtual Function Command Interface Enables Local Arbitrary Code Execution on NVIDIA ConnectX and BlueField Devices

Sat, 11 Jul 2026 02:15:00 +0000

Type	Values Removed	Values Added
Title	Local Out‑of‑Bounds Write in NVIDIA ConnectX/BlueField VF Command Interface Enables Arbitrary Code Execution

Fri, 10 Jul 2026 03:45:00 +0000

Type	Values Removed	Values Added
Title		Local Out‑of‑Bounds Write in NVIDIA ConnectX/BlueField VF Command Interface Enables Arbitrary Code Execution

Thu, 09 Jul 2026 02:30:00 +0000

Type	Values Removed	Values Added
Title	Out-of-Bounds Write in NVIDIA ConnectX and BlueField VF Interface Enables Local Code Execution

Wed, 08 Jul 2026 07:45:00 +0000

Type	Values Removed	Values Added
Title		Out-of-Bounds Write in NVIDIA ConnectX and BlueField VF Interface Enables Local Code Execution

Tue, 07 Jul 2026 20:45:00 +0000

Type	Values Removed	Values Added
Title	Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface Leading to Local Arbitrary Code Execution

Tue, 07 Jul 2026 03:00:00 +0000

Type	Values Removed	Values Added
Title		Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Virtual Function Command Interface Leading to Local Arbitrary Code Execution

Mon, 06 Jul 2026 15:15:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in NVIDIA ConnectX/BlueField VF Command Interface Enables Local Code Execution

Mon, 06 Jul 2026 03:00:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in NVIDIA ConnectX/BlueField VF Command Interface Enables Local Code Execution

Sun, 05 Jul 2026 11:15:00 +0000

Type	Values Removed	Values Added
Title	Local Arbitrary Code Execution via Out-of-Bounds Write in NVIDIA ConnectX and BlueField VF Command Interface

Sat, 04 Jul 2026 22:15:00 +0000

Type	Values Removed	Values Added
Title		Local Arbitrary Code Execution via Out-of-Bounds Write in NVIDIA ConnectX and BlueField VF Command Interface

Sat, 04 Jul 2026 14:30:00 +0000

Type	Values Removed	Values Added
Title	Vulnerable VF Command Interface Allows Local Arbitrary Code Execution on NVIDIA ConnectX and BlueField Devices

Sat, 04 Jul 2026 07:00:00 +0000

Type	Values Removed	Values Added
Title		Vulnerable VF Command Interface Allows Local Arbitrary Code Execution on NVIDIA ConnectX and BlueField Devices

Fri, 03 Jul 2026 23:00:00 +0000

Type	Values Removed	Values Added
Title	NVIDIA ConnectX and BlueField Devices Vulnerable to Local Out-of-Bounds Write Leading to Arbitrary Code Execution

Fri, 03 Jul 2026 08:15:00 +0000

Type	Values Removed	Values Added
Title		NVIDIA ConnectX and BlueField Devices Vulnerable to Local Out-of-Bounds Write Leading to Arbitrary Code Execution

Thu, 02 Jul 2026 16:30:00 +0000

Type	Values Removed	Values Added
Title	Local Virtual Function Vulnerability Permits Arbitrary Code Execution

Thu, 02 Jul 2026 05:45:00 +0000

Type	Values Removed	Values Added
Title		Local Virtual Function Vulnerability Permits Arbitrary Code Execution

Wed, 01 Jul 2026 23:45:00 +0000

Type	Values Removed	Values Added
Title	VF Command Interface Out‑of‑Bounds Write Enables Local Arbitrary Code Execution

Wed, 01 Jul 2026 20:00:00 +0000

Type	Values Removed	Values Added
Title		VF Command Interface Out‑of‑Bounds Write Enables Local Arbitrary Code Execution

Wed, 01 Jul 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 01 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Weaknesses		CWE-787
References		https://github.com/NVIDIA/product-security/tree/main/2026/5699 https://nvd.nist.gov/vuln/detail/CVE-2025-23351 https://www.cve.org/CVERecord?id=CVE-2025-23351
Metrics		cvssV3_1 `{'score': 9, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2026-07-01T14:39:03.200Z

Updated: 2026-07-01T16:03:10.537Z

Reserved: 2025-01-14T01:07:21.737Z

Link: CVE-2025-23351

Vulnrichment

Updated: 2026-07-01T16:03:06.715Z

NVD

Status : Awaiting Analysis

Published: 2026-07-01T16:16:29.903

Modified: 2026-07-01T18:32:29.917

Link: CVE-2025-23351

Redhat

No data.

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object