CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

CVE-2019-20382

Summary of CVE-2019-20382 (mode C) QEMU 4.1.0 is affected by a memory leak in zrle_compress_data (ui/vnc-enc-zrle.c) during a VNC disconnect. The leak is due to incorrect use of libz, where memory allocated in deflateInit2 may not be freed by deflateEnd. This leads to a leak of allocated memory o...