The vulnerability of the qxl_phys2virt() function in the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of the qxlphys2virt function in the QEMU hardware emulation software is related to a read-off-the-boundary error in the QXL representation in QEMU. Exploiting this vulnerability may allow a malicious actor to trigger a service failure...

Out-of-bounds Read

qemu is vulnerable to Out-of-bounds Read. An out-of-bounds read flaw was found qxlphys2virt function which does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use thi...