In QEMU 5.0.0 and earlier es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.

...

QEMU Buffer Overflow Vulnerability (CNVD-2020-31087)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the es1370transferaudio file in hw/audio/es1370.c in QEMU version 4.2.0. The...