Out-of-Bounds Read and Write in Viridian Hypercalls Affecting Xen Hypervisor
CVE-2025-58148

7.5HIGH

Key Information:

Vendor

Xen Project
Status
Xen Project
Vendor
CVE Published:
31 October 2025

What is CVE-2025-58148?

Multiple Viridian hypercalls in the Xen hypervisor can be manipulated to specify incorrect vCPU ID masks. This can result in boundary checking flaws across various formats, leading to out-of-bounds reads and writes. Consequently, an attacker could exploit this vulnerability to access unauthorized memory locations, potentially compromising system integrity and stability.

Affected Version(s)

Xen consult Xen advisory XSA-475

References

https://xenbits.xenproject.org/xsa/advisory-475.html

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Teddy Astie of Vates
JSON
.