The vulnerability of the fdctrl_transfer_handler() function in the hw/block/fdc.c component of the QEMU hardware emulation software allows a attacker to access confidential data and also trigger a service failure.

The vulnerability of the fdctrltransferhandler function in the hw/block/fdc.c component of the QEMU hardware emulation software is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access confidential data and...

DEBIAN-CVE-2021-3507

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 including. It could occur in fdctrltransferhandler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU...

CVE-2021-3507

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 including. It could occur in fdctrltransferhandler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU...