Database/Kernel, userspace & hypervisor
VMware ESXi / Workstation / Fusion: Heap out-of-bounds write in the USB 2.0 EHCI controller
CVSS 8.2CVE-2022-31705Kernel, userspace & hypervisorcurated
Impact
Heap out-of-bounds write in the USB 2.0 EHCI controller - VM escape to VMX process code execution (GeekPwn 2022)
Who can reach it
Tenant VM guest (local admin inside the VM)
What to do
ESXi patch + host reboot with evacuation; remove USB controllers from tenant VM templates
References
Related entries
- VMware ESXi / Workstation / Fusion: Out-of-bounds read in HGFS leaks vmx process memory to the guestCVE-2025-22226 · VMware ESXi / Workstation / FusionHigh
- VMware ESXi / Workstation / Fusion: Use-after-free in the XHCI USB controllerCVE-2024-22252 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Use-after-free in the UHCI USB controllerCVE-2024-22253 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer overflow in the VMXNET3 virtual NICCVE-2025-41236 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer underflow in VMCI leading to an out-of-bounds writeCVE-2025-41237 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Heap overflow in the PVSCSI controllerCVE-2025-41238 · VMware ESXi / Workstation / FusionCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.