Priority LOW 24
hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
CVSS 3.1MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00287 · Published 2025-07-25 · Fix deferred CWE-684
Priority LOW 24
hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
CVSS 3.1MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00287 · Published 2025-07-25 · Fix deferred CWE-642
Priority LOW 36
A heap buffer overflow was found in the virtio-snd device in QEMU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2024-11-14 · Fixed in 9.1.0 CWE-122
Priority LOW 28
A heap-based buffer overflow was found in the SDHCI device emulation of QEMU.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00557 · Published 2024-11-14 · Fixed in 9.0.0 CWE-122
Priority LOW 37
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00249 · Published 2024-10-21 · No fix listed CWE-416
Priority LOW 25
A flaw was found in QEMU.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00286 · Published 2024-09-19 · Fix deferred CWE-617
Priority LOW 31
A flaw was found in the virtio-net device in QEMU.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00656 · Published 2024-07-05 · Partial fix · 9.1.0 CWE-125
Priority MEDIUM 58
A flaw was found in QEMU.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00445 · Published 2024-04-10 · Fixed in 17:9.0.0-10.el9_5.3 CWE-617
Priority HIGH 73
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01397 · Published 2024-02-20 · No fix listed CWE-120
Priority LOW 27
An issue was discovered in QEMU 7.1.0 through 8.2.1.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.0029 · Published 2024-02-19 · No fix listed CWE-787
Priority LOW 27
An issue was discovered in QEMU 7.1.0 through 8.2.1.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00596 · Published 2024-02-19 · Fixed CWE-122
Priority LOW 31
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01261 · Published 2024-01-12 · Fixed in 8100020240314161907.e155f54d, 17:8.2.0-11.el9_4 CWE-476
Priority LOW 24
A stack based buffer overflow was found in the virtio-net device of QEMU.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2024-01-02 · Partial fix · 8100020240314161907.e155f54d, 17:9.0.0-10.el9_5.3 CWE-121
Priority MEDIUM 64
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2023-12-06 · Fixed in 8.1.0-rc0 CWE-284
Priority LOW 32
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code).
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2023-11-03 · Partial fix · 8100020240314161907.e155f54d, 17:8.2.0-11.el9_4 CWE-821
Priority LOW 35
This CVE exists because of an incomplete fix for CVE-2021-3750.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00236 · Published 2023-09-13 · Fixed CWE-416
Priority LOW 33
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01891 · Published 2023-09-13 · Fixed in 8100020240314161907.e155f54d, 17:8.2.0-11.el9_4 CWE-835
Priority LOW 25
A flaw was found in QEMU.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00259 · Published 2023-09-13 · Partial fix · 8.1.0-rc0 CWE-617
Priority MEDIUM 58
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00415 · Published 2023-09-11 · Partial fix CWE-369
Priority LOW 39
An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00697 · Published 2023-08-28 · No fix listed
Priority MEDIUM 52
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a ma…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-08-22 · No fix listed CWE-476
Priority LOW 25
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00363 · Published 2023-08-14 · No fix listed CWE-476
Priority LOW 29
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00372 · Published 2023-08-04 · Fixed in 8.1.0 CWE-125
Priority LOW 28
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2023-08-03 · No fix listed CWE-122
Priority LOW 34
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2023-07-24 · No fix listed CWE-281
Load more
THREATIST.IORead the docs