SPICE memslot_get_virt Code Execution

The vulnerability of the memslotgetvirt function in the SPICE rendering system’s “deleted virtual working area” component is related to the possibility of reading values beyond the allowed range due to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service...

SPICE demarshal Heap Buffer Overflow DoS

The vulnerability of the writevalidatearrayitem function in the SPICE rendering system’s “demarshal.py” file is related to message processing errors that lead to buffer overflows. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...