Lucene search

K
osvGoogleOSV:CVE-2019-3813
HistoryFeb 04, 2019 - 6:29 p.m.

CVE-2019-3813

2019-02-0418:29:00
Google
osv.dev
12

EPSS

0.003

Percentile

69.8%

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.