CVE-2026-16271

hw/display/qxl: validate primary surface stride against width...

UBUNTU-CVE-2026-77913

hw/display/vga: fix text-mode OOB write after a graphics surface switch...

UBUNTU-CVE-2026-16271

hw/display/qxl: validate primary surface stride against width...

CVE-2026-77913

hw/display/vga: fix text-mode OOB write after a graphics surface switch...

PT-2026-109350

hw/display/qxl: validate primary surface stride against width...

CVE-2026-77913

hw/display/vga: fix text-mode OOB write after a graphics surface switch...

PT-2026-41400

hw/display: don't accidentally autofree existing virgl resources...

Oracle Linux 9 : qemu-kvm (ELSA-2024-12674)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12674 advisory. - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs Philippe Mathieu-Daude Orabug: 36869694 CVE-2024-3446 - hw/char/virtio-serial-bus: Protec...

PT-2020-6477

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.1 Description The issue is related to incorrect calculations in the ati 2d blt function within the hw/display/ati 2d.c file of the QEMU emulator. This can lead to an outside-limits situation in a calculation, allowing a remote...

CVE-2020-27616: Incorrect Calculation

ati2dblt in hw/display/ati2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process...

CVE-2020-12829: Integer Overflow or Wraparound

In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while handling MMIO write operations through the sm5012denginewrite callback. A local attacker could abuse this flaw to crash the QEMU process in sm5012doperatio...

QEMU Denial of Service Vulnerability (CNVD-2020-36746)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in the ati-vga of the hw/display/ati.c file in QEMU version 4.2.0. An attacker can exploit th...

CVE-2019-15034

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

CVE-2019-15034: Buffer Copy without Checking Size of Input

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

PT-2020-9646

Name of the Vulnerable Software and Affected Versions QEMU version 4.0.0 Description The issue is related to a buffer overflow in the PCIe extended config space due to insufficient PCI config space allocation in the hw/display/bochs-display.c file. Recommendations For QEMU version 4.0.0, at the...

CVE-2019-12155

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

CVE-2019-12155

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

CVE-2019-12155: NULL Pointer Dereference

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

PT-2019-4600

Name of the Vulnerable Software and Affected Versions QEMU versions 3.1.x through 4.0.0 Description The issue is related to a NULL pointer dereference in the interface release resource function in hw/display/qxl.c. This could potentially allow a remote attacker to cause a denial of service. The...