CVE-2023-40360

2023-08-1400:00:00

mitre

raw.githubusercontent.com

qemu

null pointer

nvme_directive_receive

configuration checks

flexible data placement

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

JSON

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.