The vulnerability of the nvme_fdp_events() function in the NVMe emulator virtual device of the QEMU hardware infrastructure allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the nvmefdpevents function in the NVMe emulator virtual device of the QEMU hardware infrastructure is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2023-9605

Name of the Vulnerable Software and Affected Versions QEMU versions 8.0.4 and earlier Description The issue is related to the nvme directive receive function in the QEMU NVMe emulator, which accesses a NULL pointer because there is no check for whether an endurance group is configured before...