QEMU buffer error vulnerability

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU 4.1.0 suffers from a security vulnerability that stems from an out-of-bounds read flaw found in the ATI VGA implementation. It occurs in t...

PT-2020-10776

Name of the Vulnerable Software and Affected Versions QEMU version 4.1.0 Description The issue is an out-of-bounds read flaw in the ATI VGA implementation. It occurs in the ati cursor define routine while handling MMIO write operations through the ati mm write callback. A malicious guest could...