The host is installed with VMware Workstation 17.x before 17.0.2 or VMware Player 17.x before 17.0.2 and is prone to a stack-based buffer-overflow vulnerability. A flaw is present in the application, which fails to properly handle the functionality for sharing host Bluetooth devices with the virtual machine. Successful exploitation allows an attacker with local administrative privileges on a virtual machine to exploit this issue to execute code as the virtual machine's VMX process running on the host.