CyberSecBulletin
CVE-2025-62627NVD status: Awaiting Analysis

ESXi 8.x and ESXi 9.x hosts using AMD-Pensando…: Untrusted Pointer Dereference

Published Updated By the CyberSecBulletin desk

CVE-2025-62627 is a high-severity untrusted pointer dereference vulnerability in ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products from AMD, with a CVSS 4.0 base score of 7.2 out of 10. It can be exploited with local access to the system by an attacker with a low-privileged account, without any action from a user. There is no confirmed exploitation so far. EPSS estimates a 0.1% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Check which version of ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products you run against the affected versions below, and install the vendor's latest release.

Affected products and versions

VendorProductAffected versionsFixed in
AMDESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU productsNot specified in the recordNot stated

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
HighSuccess depends on conditions outside the attacker's control.
Attack requirements
NoneThe attack does not depend on a particular deployment or configuration.
Privileges required
LowA basic user account is enough.
User interaction
NoneNo action by a victim is required.
Confidentiality (vulnerable system)
HighSerious loss of confidentiality on the vulnerable system.
Integrity (vulnerable system)
LowLimited loss of integrity on the vulnerable system.
Availability (vulnerable system)
HighSerious loss of availability on the vulnerable system.
Confidentiality (other systems)
HighSerious loss of confidentiality on systems beyond the vulnerable one.
Integrity (other systems)
LowLimited loss of integrity on systems beyond the vulnerable one.
Availability (other systems)
HighSerious loss of availability on systems beyond the vulnerable one.

Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. Scored by CNA (amd.com).

Official description

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

More Untrusted Pointer Dereference vulnerabilities (CWE-822)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: partial).
  3. Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products

All ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products vulnerabilities

Recent Untrusted Pointer Dereference vulnerabilities

Spotted an error? Tell us.