CVE-2024-22251

Severity CVSS v4.0:
Pending analysis
Type:
CWE-125 Out-of-bounds Read
Publication date:
29/02/2024
Last modified:
10/06/2025

Description

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br />

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* 17.0 (including) 17.5.1 (excluding)
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* 13.0.0 (including) 13.5.1 (excluding)
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*