CVE-2022-31705

HIGH Year: 2022
CVSS v3 Score
8.2
High
Weakness Type
CWE-787
View all →

Vulnerability Description

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.

Related Vulnerabilities

CVE-2018-11806

HIGH
CVSS:8.2(High)

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CWE-7872018

CVE-2018-1635

HIGH
CVSS:8.2(High)

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root ...

CWE-7872018

CVE-2018-1636

HIGH
CVSS:8.2(High)

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root ...

CWE-7872018

CVE-2018-3880

HIGH
CVSS:8.2(High)

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0...

CWE-7872018

CVE-2019-12325

HIGH
CVSS:8.2(High)

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authen...

CWE-7872019

CVE-2019-2867

HIGH
CVSS:8.2(High)

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vuln...

CWE-7872019