CVE-2025-233519.0CriticalCWE-787

CVE-2025-23351: NVIDIA BlueField GA vulnerability

NVIDIA · BlueField GA

No fix listed · Affected: NVIDIA BlueField GA · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.4%probability of exploitation in the next 30 days

30th percentile

050100

Higher than 30% of scored CVEs

9.0CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Out-of-bounds Write · Memory Corruption
Vendor: NVIDIA
Published: July 2026
Band: Unlikely (under 1%), July 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 1 Jul.

1 Jul 17:41
NVIDIA patches 13 flaws, including local code exec in BlueField
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.