Skip to content
OpenAdvisories
High · 7.2 CVE-2025-62627 EUVD-2025-209815GHSA-848j-6h4j-m9q4

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel m…

Published May 13, 2026 · Updated May 14, 2026 · Assigned by AMD

Description

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

Affected products

VendorProductAffectedFixed
AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products — ESXi 8.0U3i, included in VCF 5.2.3.0 or 9.0.2 releases

References