In QEMU 5.0.0 and earlier, megasaslookupframe in hw/scsi/megasas.c has an out-of-bounds read via a crafted replyqueuehead field from a guest OS user...
3.2CVSS6.3AI score0.00377EPSS
SaveExploits0References1
Prion•added 2020/05/28 3:15 p.m.•30 views
Out-of-bounds
In QEMU 5.0.0 and earlier, megasaslookupframe in hw/scsi/megasas.c has an out-of-bounds read via a crafted replyqueuehead field from a guest OS user...