CVE-2025-57275: Buffer Copy without Checking Size of Input

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

CVE-2019-9547: Excessive Iteration

In Storage Performance Development Kit SPDK before 19.01, a malicious vhost client i.e., virtual machine could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains...

PT-2019-19698

Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit SPDK versions prior to 19.01 Description A malicious vhost client could construct a circular descriptor chain, resulting in a partial denial of service in the SPDK vhost target. This occurs because the vhost...