28 matches found
Important: qemu
Issue Overview: hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-17588 NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1f24066fc88d33455ee54a20f29994d9e69997ba v11.1.0-rc3 NOTE: Fixed by:...
SUSE CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
AZL-105275 CVE-2026-81627 affecting package qemu for versions less than 10.1.0-2
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
UBUNTU-CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
PT-2026-105041
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D LCK protection and injecting code...
QEMU buffer error vulnerability
QEMU has a buffer error vulnerability. This vulnerability stems from VAPIC setup in hw/i386/vapic.c; it fails to verify whether writeable RAM aliases are retained within the option ROM window. As a result, privileged guest users on Q35/KVM machines may overwrite these aliases onto locked SDRAM,...
EUVD-2015-8543
Malware in sbrugna...
QEMU DoS
The vulnerability of the QEMU hardware emulator for computers with Q35 chips stems from an overflow in the dynamic memory buffer. Exploiting this vulnerability can allow a local attacker to cause a system failure...
DEBIAN-CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
Heap overflow
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666
CVE-2015-8666 : Heap-based buffer overflow in QEMU when built with the Q35-chipset PC system emulator. Affects QEMU’s VM migration path; Debian security advisory and Debian LTS note the issue among a broader set of QEMU vulnerabilities and indicate a security update is available (Jessie fixed in ...
CVE-2015-8666
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
CVE-2015-8666: Out-of-bounds Write
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...
Ubuntu: Security Advisory (USN-2891-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2891-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2891-1 advisory. Qinghao Tang discovered that QEMU incorrectly handled PCI MSI-X support. An attacker inside the guest could use this issue to cause QEMU to crash,...