A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade python3-libvirtUpgrade perl-Sys-VirtUpgrade python3-libguestfsUpgrade libvirt-clientUpgrade virt-v2v-bash-completionUpgrade libguestfs-develUpgrade libiscsi-develUpgrade libvirt-wiresharkUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-hivexUpgrade nbdkit-tar-pluginUpgrade sgabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-vddk-pluginUpgrade superminUpgrade libvirt-develUpgrade netcfUpgrade libiscsi-utilsUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storageUpgrade libnbdUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-java-develUpgrade hivex-develUpgrade libguestfs-gfs2Upgrade nbdkit-bash-completionUpgrade netcf-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade sgabiosUpgrade seabios-binUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade nbdkit-xz-filterUpgrade nbdfuseUpgrade swtpm-toolsUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-nbd-pluginUpgrade seabiosUpgrade libguestfs-tools-cUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade libtpmsUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-secretUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade swtpm-develUpgrade libvirt-dbusUpgrade nbdkit-ssh-pluginUpgrade supermin-develUpgrade nbdkitUpgrade virt-v2vUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade libguestfs-javadocUpgrade nbdkit-python-pluginUpgrade nbdkit-gzip-pluginUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-jaUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-hivexUpgrade netcf-develUpgrade qemu-kvm-block-sshUpgrade nbdkit-develUpgrade nbdkit-basic-filtersUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade hivexUpgrade libguestfsUpgrade qemu-kvm-coreUpgrade libvirt-docsUpgrade libvirtUpgrade libguestfs-gobjectUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-nssUpgrade libguestfs-inspect-iconsUpgrade qemu-kvmUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libtpms-develUpgrade qemu-imgUpgrade swtpm-tools-pkcs11Upgrade nbdkit-tar-filterUpgrade libnbd-bash-completionUpgrade nbdkit-serverUpgrade nbdkit-gzip-filterUpgrade nbdkit-curl-pluginUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade swtpmUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-hivexUpgrade qemu-kvm-block-glusterUpgrade seavgabios-binUpgrade python3-libnbdUpgrade libguestfs-winsupportUpgrade nbdkit-tmpdisk-pluginUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade virt-dibUpgrade swtpm-libsUpgrade libiscsiUpgrade libvirt-daemon-driver-nodedev | Oct 16, 2024 | Aug 3, 2023 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-xenUpgrade qemuUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-x86 | Jan 9, 2024 | Aug 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub