QEMU Buffer Overflow Vulnerability (CNVD-2022-84156)

QEMU (Quick Emulator) is a set of emulation processor software by Fabrice Bellard, a French personal developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that stems from a lack of validation of the input data size or length in the read_erst_record() and write_erst_record() functions of the ACPI Error Record Serialization Table (ERST) device, which can be exploited by malicious attackers to crash the QEMU process on the host to crash.