Description
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Published: 2026-07-01
Score: 9 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

NVIDIA ConnectX and BlueField devices contain an out‑of‑bounds write flaw (CWE‑787) in their command interface. A local user who has virtual‑function access can send crafted input that causes the device to write beyond a buffer boundary, allowing the attacker to execute arbitrary code on the NIC firmware.

Affected Systems

The flaw applies to all NVIDIA BlueField products – the General Availability release and the LTS22, LTS23, LTS24 editions – as well as all NVIDIA ConnectX products – the GA release and the LTS22 through LTS24 iterations. Specific firmware or driver versions are not enumerated, so any releases within those product families may be impacted.

Risk and Exploitability

The CVSS score of 9.0 indicates a high severity flaw. The EPSS score is below 1%, signaling a low probability of exploitation at present, and the vulnerability is not listed in CISA KEV. The likely attack vector is local and requires virtual‑function privileges on the NIC; exploiting the out‑of‑bounds write enables the attacker to run malicious code on the device.

Generated by OpenCVE AI on July 22, 2026 at 14:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply NVIDIA firmware or driver updates that fix the out‑of‑bounds write flaw.
  • Disable or restrict virtual‑function access on the affected NICs, or delegate VFs only to trusted workloads.
  • If no update or VF restriction is possible, isolate the device from untrusted networks, monitor for anomalous activity, and consider using a dedicated VF or a jump host to reduce exposure.

Generated by OpenCVE AI on July 22, 2026 at 14:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enabling Arbitrary Code Execution

Fri, 17 Jul 2026 13:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enabling Arbitrary Code Execution

Thu, 16 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface Allows Arbitrary Code Execution

Tue, 14 Jul 2026 19:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface Allows Arbitrary Code Execution

Mon, 13 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enables Arbitrary Code Execution

Sun, 12 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface Enables Arbitrary Code Execution

Sat, 11 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Leading to Local Code Execution

Thu, 09 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Leading to Local Code Execution

Thu, 09 Jul 2026 02:30:00 +0000

Type Values Removed Values Added
Title Local Out-of-Bounds Write Enabling Arbitrary Code Execution on NVIDIA ConnectX/BlueField Devices

Wed, 08 Jul 2026 02:30:00 +0000

Type Values Removed Values Added
Title Local Out-of-Bounds Write Enabling Arbitrary Code Execution on NVIDIA ConnectX/BlueField Devices

Tue, 07 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write Vulnerability in NVIDIA BlueField and ConnectX Virtual Function Interface

Tue, 07 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write Vulnerability in NVIDIA BlueField and ConnectX Virtual Function Interface

Mon, 06 Jul 2026 12:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface

Sun, 05 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX and BlueField Command Interface

Sun, 05 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Leading to Arbitrary Code Execution

Sat, 04 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA ConnectX and BlueField Command Interface Leading to Arbitrary Code Execution

Sat, 04 Jul 2026 07:00:00 +0000

Type Values Removed Values Added
Title Local Virtual Function Out‑of‑Bounds Write in NVIDIA ConnectX/BlueField Leads to Code Execution

Fri, 03 Jul 2026 23:00:00 +0000

Type Values Removed Values Added
Title Local Virtual Function Out‑of‑Bounds Write in NVIDIA ConnectX/BlueField Leads to Code Execution

Fri, 03 Jul 2026 16:00:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Allowing Local Code Execution on NVIDIA BlueField and ConnectX NICs

Fri, 03 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Allowing Local Code Execution on NVIDIA BlueField and ConnectX NICs

Thu, 02 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX/BlueField VF Command Interface

Thu, 02 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA ConnectX/BlueField VF Command Interface

Thu, 02 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Write‑Outside‑Bounds Vulnerability in NVIDIA ConnectX and BlueField Command Interface Leading to Arbitrary Code Execution

Wed, 01 Jul 2026 18:45:00 +0000

Type Values Removed Values Added
Title Write‑Outside‑Bounds Vulnerability in NVIDIA ConnectX and BlueField Command Interface Leading to Arbitrary Code Execution

Wed, 01 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-07-01T16:03:30.696Z

Reserved: 2025-01-14T01:07:21.737Z

Link: CVE-2025-23350

cve-icon Vulnrichment

Updated: 2026-07-01T16:03:27.311Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-22T14:30:17Z

Weaknesses