FreeBSD -- Insufficient bounds checking in bhyve(8) device model

Problem Description:
Insufficient bounds checking in one of the device models
provided by bhyve(8) can permit a guest operating system
to overwrite memory in the bhyve(8) processing possibly
permitting arbitary code execution.
Impact:
A guest OS using a firmware image can cause the bhyve
process to crash, or possibly execute arbitrary code on the
host as root.