Skip to content
OpenAdvisories
High · 8.8 CVE-2025-62624 EUVD-2025-209814GHSA-88p7-47mv-xxh4

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially…

Published May 13, 2026 · Updated May 14, 2026 · Assigned by AMD

Vendor: AMD Product: ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products Category: Virtualization

Description

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products — ESXi 8.0U3i, included in VCF 5.2.3.0 or 9.0.2 releases

References