Forwarded by Taiwan Computer Crisis Management and Coordination Center TWCERTCC-200-202507-00000011

[Content Description]
1. [CVE-2025-41236, CVSS: 9.3] The VMXNET3 virtual network interface card of VMware ESXi, Workstation and Fusion has an integer overflow vulnerability.

2. [CVE-2025-41237, CVSS: 9.3] An integer underflow vulnerability exists in VMCI of VMware ESXi, Workstation, and Fusion, which may lead to an out-of-bounds write.

3. [CVE-2025-41238, CVSS: 9.3] The PVSCSI controller of VMware ESXi, Workstation, and Fusion has a stack overflow vulnerability, which may lead to an out-of-bounds write.

[Influence Platform]
● VMware Cloud Foundation
● VMware vSphere Foundation
● VMware ESXi
● VMware Workstation Pro
● VMware Fusion
● VMware Tools
● VMware Telco Cloud Platform
● VMware Telco Cloud Infrastructure

[Suggested measures]
Repair according to the solution released by the official website:
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877

[References]
https://www.twcert.org.tw/tw/cp-169-10250-08712-1.html