In QEMU 5.0.0 and earlier, megasaslookupframe in hw/scsi/megasas.c has an out-of-bounds read via a crafted replyqueuehead field from a guest OS user...
3.2CVSS6.8AI score0.00377EPSS
SaveExploits0References20
Microsoft CVE•added 2020/08/18 7:0 a.m.•5 views
In QEMU 5.0.0 and earlier megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
