VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026

CVE-2024-22251

CVE-2024-22251

Description

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • VMware/Fusion2 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=13.0.0,<13.5.1
    • (no CPE)
  • VMware/Workstation2 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=17.0,<17.5.1
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.