What’s Vulnerable › Vulnerabilities

CVE-2024-51562: bhyve(8) nvme_opc_get_log_page buffer over-read

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-12 · updated 2026-06-17
• Weakness: CWE-125

Description

The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value.

Affected products

• FreeBSD: all versions

References

• https://security.freebsd.org/advisories/FreeBSD-SA-24:17.bhyve.asc
• https://security.netapp.com/advisory/ntap-20250207-0008/

Get alerted when CVE-2024-51562 or the next vulnerability affects your stack