A vulnerability was found in VMware ESXi, Cloud Foundation, Workstation, Fusion, Telco Cloud Platform and Telco Cloud Infrastructure. It has been declared as critical. This vulnerability affects unknown code of the component Paravirtualized SCSI. The manipulation leads to out-of-bounds write.
This vulnerability was named CVE-2025-41238. Attacking locally is a requirement. There is no exploit available.
It is recommended to upgrade the affected component.
