CVE-2026-62958

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

EUVD-2026-114467

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory::binaryloader checks PTLOAD program-header bounds, but Memory::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

CVE-2026-62958: libriscv: libriscv is a RISC-V sandbox and emulator

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. Memory ::binaryloader checks PTLOAD program-header bounds, but Memory ::serializeexecutesegment trusts section-header shoffset and shsize when locating .text without...

QEMU: intel-hda: segmentation fault due to stack overflow

A stack overflow vulnerability was found in the Intel HD Audio device intel-hda of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability...

qemu: cirrus: insufficient blit region checks

It was found that the Cirrus blit region checks were insufficient. A privileged guest user could use this flaw to write outside of VRAM-allocated buffer boundaries in the host's QEMU process address space with attacker-provided data...