Skip to content
OpenAdvisories
High · 7.1 CVE-2023-34044 EUVD-2023-38163GHSA-mj48-4fj3-6fjg

Information disclosure vulnerability in bluetooth device-sharing functionality

Published Oct 20, 2023 · Updated Aug 2, 2024 · Assigned by vmware

Description

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds
read vulnerability that exists in the functionality for sharing host
Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual
machine may be able to read privileged information contained in
hypervisor memory from a virtual machine.

Affected products

VendorProductAffectedFixed
VMware Workstation 17.x – < 17.5 17.5
VMware Fusion 13.x – < 13.5 13.5

References