An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Apr 27, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 27, 2020 |
| Suse | — | Upgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ksmUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-lang | Feb 4, 2022 | Apr 27, 2020 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemuUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-ppc | May 22, 2020 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub