Out-of-Bounds Write Vulnerability in VMware ESXi, Workstation, and Fusion

CVE-2020-3982

Summary

VMware ESXi, Workstation, and Fusion products are susceptible to an out-of-bounds write vulnerability stemming from a time-of-check time-of-use issue in ACPI device handling. This flaw allows an attacker with administrative access to a compromised virtual machine to potentially exploit the vulnerability, leading to a crash of the virtual machine's vmx process or corruption within the hypervisor's memory heap. Proper patching is essential to mitigate this risk.

References