{"id":"CVE-2022-35414","aliases":["AZL-10110","AZL-35161","BELL-CVE-2022-35414","DEBIAN-CVE-2022-35414","DLA-3099-1","EUVD-2022-38302","GHSA-78j4-r4gh-xcm9","OESA-2022-1791","SUSE-SU-2022:3594-1","SUSE-SU-2022:3660-1","SUSE-SU-2022:3768-1","SUSE-SU-2022:3795-1","SUSE-SU-2023:0761-1","openSUSE-SU-2024:12209-1"],"status":"disputed","title":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00664,"percentile":0.52224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-908"],"published":"2022-07-11T01:48:46Z","modified":"2026-11-03T06:02:38Z","fixes":[{"ecosystem":"Azure Linux:2","package":"qemu","fixed_in":["6.2.0-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"qemu","fixed_in":["6.2.0-18"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:7.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:7.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:7.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"qemu","fixed_in":["4.1.0-67.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"qemu","fixed_in":["4.1.0-71.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"qemu","fixed_in":["6.2.0-44.oe2203"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-18"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-8+deb10u9"}]}],"versions":["1:3.1+dfsg-8","1:3.1+dfsg-8+deb10u2","1:3.1+dfsg-8+deb10u3","1:3.1+dfsg-8+deb10u4","1:3.1+dfsg-8+deb10u5","1:3.1+dfsg-8+deb10u6","1:3.1+dfsg-8+deb10u7","1:3.1+dfsg-8+deb10u8","1:3.1+dfsg-8~deb10u1"],"bundled":35},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-67.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-71.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-44.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150200.69.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-150300.118.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-150100.80.43.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qemu-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150400.37.8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-66.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-66.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-53.1"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"qemu","product":"qemu"}],"references":[{"url":"https://github.com/qemu/qemu/blob/f200ff158d5abcb974a6b597a962b6b2fbea2b06/softmmu/physmem.c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://github.com/qemu/qemu/commit/418ade7849ce7641c0f7333718caf5091a02fd4c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/qemu/qemu/commit/3517fb726741c109cae7995f9ea46f0cab6187d6#diff-83c563ed6330dc5d49876f1116e7518b5c16654bbc6e9b4ea8e28f5833d576fcR482","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/qemu/qemu/blob/v7.0.0/include/exec/cpu-all.h#L145-L148","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"https://github.com/qemu/qemu/commit/3517fb726741c109cae7995f9ea46f0cab6187d6#diff-83c563ed6330dc5d49876f1116e7518b5c16654bbc6e9b4ea8e28f5833d576fcR482.aa","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://gitlab.com/qemu-project/qemu/-/issues/1065","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mitigation","Patch","Third Party Advisory","report"]},{"url":"https://www.mail-archive.com/qemu-devel%40nongnu.org/msg895266.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://sick.codes/sick-2022-113","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.qemu.org/docs/master/system/security.html#non-virtualization-use-case","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35414","tags":["web","advisory"]},{"url":"https://www.mail-archive.com/qemu-devel@nongnu.org/msg895266.html"},{"url":"https://github.com/advisories/GHSA-78j4-r4gh-xcm9"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-35414","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35414.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-35414","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1791","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223594-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175144","tags":["report"]},{"url":"https://bugzilla.suse.com/1182282","tags":["report"]},{"url":"https://bugzilla.suse.com/1192115","tags":["report"]},{"url":"https://bugzilla.suse.com/1198035","tags":["report"]},{"url":"https://bugzilla.suse.com/1198037","tags":["report"]},{"url":"https://bugzilla.suse.com/1198038","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35414","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223660-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201367","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223768-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185000","tags":["report"]},{"url":"https://bugzilla.suse.com/1192463","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3507","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223795-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230761-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172033","tags":["report"]},{"url":"https://bugzilla.suse.com/1172382","tags":["report"]},{"url":"https://bugzilla.suse.com/1180207","tags":["report"]},{"url":"https://bugzilla.suse.com/1193880","tags":["report"]},{"url":"https://bugzilla.suse.com/1197653","tags":["report"]},{"url":"https://bugzilla.suse.com/1198712","tags":["report"]},{"url":"https://bugzilla.suse.com/1205808","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4144","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26353","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-35414","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"disputed","published":"2022-07-11T01:48:46Z","modified":"2024-08-03T09:36:44.144Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-38302","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"published","published":"2022-07-11T01:48:46Z","modified":"2024-08-03T09:36:44Z","updated_at":"2026-11-03T03:25:27.391244Z"}],"ghsa":[{"id":"GHSA-78j4-r4gh-xcm9","title":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.","status":"published","published":"2022-07-12T00:00:59Z","modified":"2024-03-21T03:34:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:55:42.026509Z"}],"nvd":[{"id":"CVE-2022-35414","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"disputed","published":"2022-07-11T02:15:07.32Z","modified":"2026-06-17T04:51:47.757Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.1,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:07:23.322724Z"}],"osv":[{"id":"AZL-10110","title":"CVE-2022-35414 affecting package qemu for versions less than 6.2.0-7","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"published","published":"2022-07-11T02:15:07Z","modified":"2026-04-21T04:16:31.931139Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:00.253976Z"},{"id":"AZL-35161","title":"CVE-2022-35414 affecting package qemu for versions less than 6.2.0-18","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"published","published":"2022-07-11T02:15:07Z","modified":"2026-04-21T04:56:39.791488Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"BELL-CVE-2022-35414","title":"CVE-2022-35414 does not affect BellSoft software","status":"withdrawn","published":"2022-07-11T02:15:00Z","modified":"2026-01-26T09:47:36.849167Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"OESA-2022-1791","title":"qemu security update","description":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\r\n\r\nSecurity Fix(es):\r\n\r\nsoftmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.(CVE-2022-35414)","status":"published","published":"2022-07-30T11:05:04Z","modified":"2026-08-18T01:16:53.593854313Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"CVE-2022-35414","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"published","published":"2022-07-11T01:48:46Z","modified":"2026-10-28T10:27:01.610386347Z","updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"DEBIAN-CVE-2022-35414","description":"softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., \"Bugs affecting the non-virtualization use case are not considered security bugs at this time.","status":"published","published":"2022-07-11T02:15:07.32Z","modified":"2026-11-03T06:02:38.909205568Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3099-1","title":"qemu - security update","status":"published","published":"2022-09-05T00:00:00Z","modified":"2026-03-09T01:23:02.473037Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2024:12209-1","title":"qemu-7.0.0-53.1 on GA media","description":"These are all security issues fixed in the qemu-7.0.0-53.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:30:29.043241Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:3594-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)\n- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)\n- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)\n","status":"published","published":"2022-10-17T06:40:58Z","modified":"2026-02-04T02:15:57.803404Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3660-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367) \n","status":"published","published":"2022-10-19T12:00:05Z","modified":"2026-02-04T04:11:47.348491Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3768-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)\n- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)\n- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)\n- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)\n- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)\n","status":"published","published":"2022-10-26T10:13:09Z","modified":"2025-05-02T04:30:33.657236Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3795-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)\n- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)\n","status":"published","published":"2022-10-27T10:46:02Z","modified":"2026-02-04T03:47:13.675896Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:0761-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- bsc#1172033 (CVE-2020-13253)\n\n- bsc#1180207 (CVE-2020-14394)\n\n- bsc#1172382 (CVE-2020-13754)\n\n- bsc#1198038 (CVE-2022-0216)\n\n- bsc#1193880 (CVE-2021-3929)\n\n- bsc#1197653 (CVE-2022-1050)\n\n- bsc#1205808 (CVE-2022-4144), bsc#1198712 (CVE-2022-26354)\n  \n- bsc#1175144 (CVE-2020-17380, CVE-2020-25085, CVE-2021-3409),\n  bsc#1185000 (CVE-2021-3507), bsc#1201367, CVE-2022-35414\n- About bsc#1175144, see also bsc#1182282 (CVE-2021-3409)\n  \n- bsc#1198035, CVE-2021-4206\n","status":"published","published":"2023-03-16T10:35:54Z","modified":"2026-02-04T04:04:51.058114Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}