CVE-2023-20869

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

Affected

VMware Workstation Pro / Player (Workstation) and VMware Fusion

CVSS v3.1 NVD

8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

2.02% chance of exploitation in the next 30 days, 81st percentile

Published

2023-04-25

Updated

2025-02-04

Proof-of-concept exploits (1)

• xairy/vmware-exploitation1491★ · 2024-09-04

Security advisories

• https://www.vmware.com/security/advisories/VMSA-2023-0008.html

References

• CVE Record
• NVD entry

Related

• CVE-2017-3881
• CVE-2017-4901
• CVE-2018-6973
• CVE-2020-3947
• CVE-2022-31705