Skip to content
fr Sign in
5.9 Medium

CVE-2024-22251 VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface…

Description

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.

Affected products and versions

Product Affected versions Fixed in
VMware Workstation 17 17.x → < 17.5.1 17.5.1
VMware Fusion 13 13.x → < 13.5.1 13.5.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of VMware Workstation

The 14 CVEs of VMware Workstation →
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability 7.1 High CVE-2024-22273 The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious… 8.1 High CVE-2024-22270 VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS)… 7.1 High CVE-2024-22269 VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious… 7.1 High
Track this CVE