PT-2020-6475

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0 Description The issue is related to the ati-vga component in the QEMU hardware emulator, which is vulnerable to uncontrolled recursion. This can be triggered by a crafted mm index value during an ati mm read or ati mm write...

PT-2020-6466

Name of the Vulnerable Software and Affected Versions QEMU versions 4.0.1 through 4.2.0 Description An integer overflow was found in the way QEMU implemented ATI VGA emulation. This flaw occurs in the ati 2d blt routine in hw/display/ati-2d.c while handling MMIO write operations through the ati m...

PT-2020-10776

Name of the Vulnerable Software and Affected Versions QEMU version 4.1.0 Description The issue is an out-of-bounds read flaw in the ATI VGA implementation. It occurs in the ati cursor define routine while handling MMIO write operations through the ati mm write callback. A malicious guest could...