VMware ESXi NVMe Controller Out-of-Bounds Read Vulnerability

VMware ESXi contains an out-of-bounds read vulnerability in the NVMe controller that allows a guest virtual machine to read hypervisor memory. This vulnerability could potentially lead to information disclosure from the ESXi host or from other virtual machines.

The vulnerability exists in the way the NVMe controller processes certain commands from guest virtual machines. When processing these commands, the controller fails to properly validate memory boundaries, allowing a malicious virtual machine to read memory outside of its allocated boundaries.

An attacker with administrative access to a virtual machine could exploit this vulnerability to read sensitive information from the ESXi host memory, potentially including cryptographic keys, credentials, or data from other virtual machines.