Every CVE Search/ Get API key

OSV-2023-390

Heap-buffer-overflow in sdhci_write

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sdhci_write
memory_region_write_accessor
memory_region_dispatch_write

What each source reports

OSV No score

Heap-buffer-overflow in sdhci_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
sdhci_write
memory_region_write_accessor
memory_region_dispatch_write
Record
OSV-2023-390
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
qemu
OSS-Fuzz
Listed versions, plus commit ranges
v7.0.0v7.0.0-rc1v7.0.0-rc2v7.0.0-rc3v7.0.0-rc4
Show 45 moreShow less
v7.1.0v7.1.0-rc0v7.1.0-rc1v7.1.0-rc2v7.1.0-rc3v7.1.0-rc4v7.2.0v7.2.0-rc0v7.2.0-rc1v7.2.0-rc2v7.2.0-rc3v7.2.0-rc4v7.2.1v7.2.2v7.2.3v7.2.4v7.2.5v8.0.0v8.0.0-rc0v8.0.0-rc1v8.0.0-rc2v8.0.0-rc3v8.0.0-rc4v8.0.1v8.0.2v8.0.3v8.0.4v8.1.0-rc0v8.1.0-rc1v8.1.0-rc2v8.1.0-rc3v8.1.0-rc4v8.1.0v7.2.6v8.0.5v8.1.1v8.1.2v8.2.0-rc0v7.2.7v8.1.3v8.2.0-rc1v8.2.0-rc2v8.2.0-rc3v8.2.0-rc4v8.2.0
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-390 is a vulnerability with no CVSS score yet in qemu, published May 12, 2023. No source lists public exploit code. No source names a fixed version.

References

This page doesn't list everything

Left out here: 115 versions. The JSON record has them.

MoveEnter Open