CVE-2023-20872

VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.

Score

CVSS 3.1 8.8 High

Status

Modified - security@vmware.com

Published

2023-04-25

Last modified

2025-02-04

Weaknesses

CWE-787

Affected products

• Fusion (Vmware)
• Workstation (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2023-0008.html