Integer underflow in VMware ESXi - CVE-2025-41237
Published: July 17, 2025
Vulnerability identifier: #VU113007
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:U/U:Green
CVE-ID: CVE-2025-41237
CWE-ID: CWE-191
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: VMware, Inc
Affected software:
VMware ESXi
VMware ESXi
Detailed vulnerability description
The vulnerability allows an attacker to compromise the affected host OS.
The vulnerability exists due to integer underflow in VMCI (Virtual Machine Communication Interface). A malicious guest with local administrative privileges on a virtual machine can trigger an integer underflow and execute arbitrary code as the virtual machine's VMX process running on the host.
How to mitigate CVE-2025-41237
Install updates from vendor's website.