{"id":"OSV-2022-581","aliases":[],"status":"published","title":"Heap-buffer-overflow in megasas_map_sgl","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-07-14T00:00:45.644503Z","modified":"2026-11-11T15:00:08Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"qemu","ranges":[{"type":"GIT","events":[{"introduced":"0e042025b9fe262316f29e4b8ec47f0b85c24e5f"}]}],"versions":["v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0","v6.2.0-rc2"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-581","title":"Heap-buffer-overflow in megasas_map_sgl","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n","status":"published","published":"2022-07-14T00:00:45.644503Z","modified":"2026-11-11T15:00:08.496704178Z","updated_at":"2026-11-11T15:13:20.837353Z"}]}}