QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest's physical address, potentially reading past the end of the bar space into adjacent pages. This could allow a malicious gues...

QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest's physical address, potentially reading past the end of the bar space into adjacent pages. This could allow a malicious gues...