CVE-2025-62624: AMD ESXi 8.x And ESXi 9.x Hosts Using AMD-Pensando Dpu Products

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

• AMD ESXi 8.x And ESXi 9.x Hosts Using AMD-Pensando Dpu Products

Published 2026-05-13. Last modified 2026-10-07.