The vulnerability in the hw/audio/virtio-snd.c component of the QEMU hardware emulation software allows a hacker to trigger a system failure.

The vulnerability of the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a system failure...

UBUNTU-CVE-2020-13361

In QEMU 5.0.0 and earlier, es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...