CVE-2025-62627

Untrusted Pointer Dereference in VMware ESXi Ionic Cloud Driver Enables Unprivileged VM Memory Leakage

View on CVE.org
Published May 13, 2026 CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

Analysis

AI-generated

Technical impact

An untrusted pointer dereference in the ionic cloud driver for VMware ESXi could enable an attacker inside an unprivileged virtual machine to read data from the host kernel memory or from co‑located guest VMs. The data exposed could reveal sensitive information or disrupt service operations, leading to loss of confidentiality and availability.

Affected Systems

AMD Pensando DPU products deployed on VMware ESXi 8.x and ESXi 9.x hosts are vulnerable.

Risk and Exploitability

The CVSS score of 7.2 indicates a high severity vulnerability. While no EPSS score is available, the risk remains sufficiently high for environments that host untrusted VMs. The attack vector is an unprivileged VM on the same ESXi host, as the description explicitly states. The vulnerability is listed outside the CISA KEV catalog, and no known exploits are reported.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest AMD and VMware security patch that resolves the ionic cloud driver pointer dereference.
  • If a patch is not yet available, enforce stricter VM isolation by limiting unprivileged VMs from accessing the kernel or other guest memory through host security policies.
  • Monitor ESXi host logs and memory access patterns for unusual read activity and isolate affected VMs promptly.

Generated by OpenCVE AI on May 13, 2026 at 04:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Amd
Amd esxi 8.x And Esxi 9.x Hosts Using Amd-pensando Dpu Products
Vendors & Products Amd
Amd esxi 8.x And Esxi 9.x Hosts Using Amd-pensando Dpu Products
Type Values Removed Values Added
Title Untrusted Pointer Dereference in VMware ESXi Ionic Cloud Driver Enables Unprivileged VM Memory Leakage
Type Values Removed Values Added
Description An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.
Weaknesses CWE-822
References
Metrics cvssV4_0

{'score': 7.2, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H'}
Weaknesses
  • CWE-822

    Untrusted Pointer Dereference

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
May 14, 2026, 2:38 PM
Reserved
Oct 16, 2025, 8:46 PM

View source JSON

Updated
May 13, 2026, 2:37 PM

JSON

Status
Awaiting Analysis
Published
May 13, 2026, 4:17 AM
Modified
Oct 7, 2026, 9:10 AM

View source JSON

No data.

Updated
May 13, 2026, 10:35 AM

JSON