CVE-2025-23350_CVE-2025-23350

9 / 10

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

Basic Information

ID CVE-2025-23350

Source nvidia

Published Jul 1, 2026 at 14:36

Modified Jul 1, 2026 at 16:03

Affected Product

Vendor NVIDIA

Product BlueField GA

Version All versions prior to 46.3008

Affected Versions NVIDIA BlueField GA All versions prior to 46.3008
NVIDIA BlueField LTS22 All versions prior to 35.8002
NVIDIA BlueField LTS23 All versions prior to 39.8002
NVIDIA BlueField LTS24 All versions prior to 43.8002
NVIDIA ConnectX GA All versions prior to 46.3008
NVIDIA ConnectX LTS22 All versions prior to 35.8002
NVIDIA ConnectX LTS23 All versions prior to 39.8002
NVIDIA ConnectX LTS24 All versions prior to 43.8002

CWE Classification

CWE-787

References

{
    "lastseen": "",
    "description": "NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.",
    "published": "2026-07-01T14:36:19.755Z",
    "modified": "2026-07-01T16:03:30.696Z",
    "type": "cve",
    "title": "CVE-2025-23350",
    "source": "nvidia",
    "references": "https://nvd.nist.gov/vuln/detail/CVE-2025-23350\nhttps://www.cve.org/CVERecord?id=CVE-2025-23350\nhttps://github.com/NVIDIA/product-security/tree/main/2026/5699",
    "id": "CVE-2025-23350",
    "bulletinFamily": "",
    "cwe": [
        "CWE-787"
    ],
    "cvelist": null,
    "sourceData": "NVIDIA BlueField GA All versions prior to 46.3008\nNVIDIA BlueField LTS22 All versions prior to 35.8002\nNVIDIA BlueField LTS23 All versions prior to 39.8002\nNVIDIA BlueField LTS24 All versions prior to 43.8002\nNVIDIA ConnectX GA All versions prior to 46.3008\nNVIDIA ConnectX LTS22 All versions prior to 35.8002\nNVIDIA ConnectX LTS23 All versions prior to 39.8002\nNVIDIA ConnectX LTS24 All versions prior to 43.8002",
    "sourceHref": "",
    "cvss": {
        "score": 9,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "BlueField GA",
    "version": "All versions prior to 46.3008",
    "vendor": "NVIDIA",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}