2 matches found
AZL-90138 CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...
6.7CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CVE-2026-48914
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...
6.7CVSS6AI score0.00158EPSS
SaveExploits0References5Affected Software7
20