VULNERABILITY INTELLIGENCE
CVE-2025-33215
CVSS score6.8 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2026-03-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Description
NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.
Weakness classification
- CWE-823: Use of Out-of-range Pointer Offset