In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 31, 2020 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade ivshmem-tools | Mar 12, 2021 | Sep 13, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 31, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub