NVIDIA ConnectX-4 LX vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NVIDIA ConnectX-4 LX: 2 record(s), with affected versions and fixes.
CVE-2025-23351
Critical · 9.0
CWE-787 Jul 1, 2026
Out-of-bounds Write in NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVE-2025-23299
Medium · 6.7
CWE-787 Oct 22, 2025
Out-of-bounds Write in NVIDIA BlueField GA
NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.