Qemu vulnerabilities

Products

• Qemu 423
• Qemu: 4

Newest

• qemu hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related... CVE-2025-54567 Fix available 4.2 MediumJuly 25, 2025
• qemu hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue... CVE-2025-54566 Fix available 4.2 MediumJuly 25, 2025
• qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability CVE-2024-6519 Fix available 8.2 HighOctober 21, 2024
• qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Qemu-kvm: usb: assertion failure in usb_ep_get() CVE-2024-8354 Fix available 5.5 MediumSeptember 19, 2024
• qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() CVE-2024-7730 Fix available 7.4 HighAugust 14, 2024
• qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss CVE-2024-6505 Fix available 6.8 MediumJuly 5, 2024
• qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 more Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() CVE-2024-3447 Fix available 6.0 MediumApril 23, 2024
• qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 more Qemu-kvm: net: assertion failure in update_sctp_checksum() CVE-2024-3567 Fix available 5.5 MediumApril 10, 2024
• qemu Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute... CVE-2024-24474 Fix available 8.8 HighFebruary 20, 2024
• qemu An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not... CVE-2024-26328 Fix available 6.0 MediumFebruary 19, 2024
• qemu An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c... CVE-2024-26327 Fix available 5.3 MediumFebruary 19, 2024
• qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 more Qemu: vnc: null pointer dereference in qemu_clipboard_request() CVE-2023-6683 Fix available 6.5 MediumJanuary 12, 2024
• qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 more Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() CVE-2023-6693 Fix available 4.9 MediumJanuary 2, 2024
• qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 more Qemu: improper ide controller reset can lead to mbr overwrite CVE-2023-5088 Fix available 6.4 MediumNovember 3, 2023
• qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 more Dma reentrancy issue (incomplete fix for cve-2021-3750) CVE-2023-2680 Fix available 7.5 HighSeptember 13, 2023
• qemu QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c... CVE-2023-42467 Fix available 5.5 MediumSeptember 11, 2023
• qemu, debian linux +1 more An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute... CVE-2020-24165 Fix availableDisputed 8.8 HighAugust 28, 2023
• qemu The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in... CVE-2022-36648 Fix availableDisputed 10.0 CriticalAugust 22, 2023
• qemu QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because... CVE-2023-40360 Fix available 5.5 MediumAugust 14, 2023
• qemu, fedora extra packages for enterprise linux, fedora +5 more +7 more Out-of-bounds read information disclosure vulnerability CVE-2023-4135 Fix available 6.0 MediumAugust 4, 2023
• qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 more Heap buffer overflow in virtio_crypto_sym_op_helper() CVE-2023-3180 Fix available 6.0 MediumAugust 3, 2023
• qemu, fedora extra packages for enterprise linux, fedora +7 more +9 more Triggerable assertion due to race condition in hot-unplug CVE-2023-3301 Fix available 5.6 MediumJuly 31, 2023
• qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 more Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service CVE-2023-3255 Fix available 6.5 MediumJuly 31, 2023
• qemu, fedora extra packages for enterprise linux, fedora +5 more +7 more Qemu: 9pfs: suid/sgid bits not dropped on file write CVE-2023-1386 3.3 LowJuly 24, 2023
• qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 more Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() CVE-2023-3019 Fix available 6.0 MediumJuly 24, 2023
• qemu, fedora extra packages for enterprise linux, fedora +8 more +10 more Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service CVE-2023-3354 Fix available 7.5 HighJuly 11, 2023
• qemu Qemu: 9pfs: improper access control on special files CVE-2023-2861 Fix available 6.0 MediumJune 30, 2023
• qemu, fedoraproject fedora, redhat enterprise linux +2 more A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be... CVE-2023-0664 Fix available 7.8 HighMarch 29, 2023
• qemu, qemu rdma, fedoraproject fedora +2 more Qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() CVE-2023-1544 Fix available 6.0 MediumMarch 23, 2023
• qemu, debian linux +1 more Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow CVE-2023-0330 Fix available 5.3 MediumMarch 6, 2023
• qemu, fedoraproject fedora +1 more An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization... CVE-2022-4172 Fix available 6.5 MediumNovember 29, 2022
• qemu, fedoraproject extra packages for enterprise linux, fedora +1 more +3 more An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The... CVE-2022-4144 Fix available 6.5 MediumNovember 29, 2022
• qemu An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading... CVE-2022-3872 Fix available 8.6 HighNovember 7, 2022
• qemu, fedoraproject fedora +1 more An integer underflow issue was found in the QEMU VNC server while processing ClientCutText... CVE-2022-3165 Fix available 6.5 MediumOctober 17, 2022
• qemu A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or... CVE-2022-2962 Fix available 7.8 HighSeptember 13, 2022
• qemu, debian linux +1 more A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ... CVE-2021-3735 Fix available 4.4 MediumAugust 26, 2022
• qemu, fedoraproject fedora +1 more A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of... CVE-2022-0216 Fix available 4.4 MediumAugust 26, 2022
• qemu, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the... CVE-2020-14394 Fix available 3.2 LowAugust 17, 2022
• qemu, debian linux +1 more softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail... CVE-2022-35414 Fix availableDisputed 8.8 HighJuly 11, 2022
• qemu, redhat enterprise linux +1 more A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not... CVE-2021-3750 Fix available 8.2 HighMay 2, 2022
• qemu, debian linux, redhat enterprise linux +2 more A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the... CVE-2021-4206 Fix available 8.2 HighApril 29, 2022
• qemu, debian linux, redhat enterprise linux +2 more A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled... CVE-2021-4207 Fix available 8.2 HighApril 29, 2022
• qemu Guest driver might execute HW commands when shared buffers are not yet allocated, potentially... CVE-2022-1050 Fix available 8.8 HighMarch 29, 2022
• qemu, debian linux, the qemu project qemu-kvm +2 more A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not... CVE-2022-26354 Fix available 3.2 LowMarch 16, 2022
• qemu, debian linux, the qemu project qemu-kvm +2 more A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with... CVE-2022-26353 Fix available 7.5 HighMarch 16, 2022
• qemu A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in... CVE-2021-3947 Fix available 5.5 MediumFebruary 18, 2022
• qemu, redhat enterprise linux +1 more A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This... CVE-2022-0358 Fix available 7.8 HighJanuary 28, 2022
• qemu, redhat enterprise linux +1 more A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to... CVE-2021-4145 Fix available 6.5 MediumJanuary 25, 2022
• qemu, redhat enterprise linux +1 more A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user... CVE-2021-4158 Fix available 6.0 MediumDecember 24, 2021
• qemu, fedoraproject fedora +1 more A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE... CVE-2021-3929 Public exploitFix available 8.2 HighDecember 24, 2021
• Show olderLoading…