CVE-2021-4207

...

AZL-9619 CVE-2021-4207 affecting package qemu for versions less than 6.2.0-13

A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use...