Database/Kernel, userspace & hypervisor
VMware ESXi / Workstation / Fusion: Heap overflow in the PVSCSI controller
CVSS 9.3CVE-2025-41238Kernel, userspace & hypervisorcurated
Impact
Heap overflow in the PVSCSI controller - out-of-bounds write and VM escape (Pwn2Own Berlin 2025)
Who can reach it
Tenant VM guest
What to do
ESXi patch + host reboot with evacuation
References
Related entries
- VMware ESXi / Workstation / Fusion: Heap out-of-bounds write in the USB 2.0 EHCI controllerCVE-2022-31705 · VMware ESXi / Workstation / FusionHigh
- VMware ESXi / Workstation / Fusion: Out-of-bounds read in HGFS leaks vmx process memory to the guestCVE-2025-22226 · VMware ESXi / Workstation / FusionHigh
- VMware ESXi / Workstation / Fusion: Use-after-free in the XHCI USB controllerCVE-2024-22252 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Use-after-free in the UHCI USB controllerCVE-2024-22253 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer overflow in the VMXNET3 virtual NICCVE-2025-41236 · VMware ESXi / Workstation / FusionCritical
- VMware ESXi / Workstation / Fusion: Integer underflow in VMCI leading to an out-of-bounds writeCVE-2025-41237 · VMware ESXi / Workstation / FusionCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.