A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade qemu-hw-usb-smartcardUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-vhost-user-gpuUpgrade qemu-vmsr-helperUpgrade qemu-vgabiosUpgrade qemu-extraUpgrade qemu-hw-usb-hostUpgrade qemu-audio-jackUpgrade qemu-langUpgrade qemu-spiceUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-imgUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-pr-helperUpgrade qemu-accel-qtestUpgrade qemu-skibootUpgrade qemu-ui-dbusUpgrade qemu-block-iscsiUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-spice-coreUpgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade qemuUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-pipewireUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-SLOFUpgrade qemu-ppcUpgrade qemu-docUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-headlessUpgrade qemu-block-nfsUpgrade qemu-audio-dbusUpgrade qemu-ipxe | Apr 23, 2026 | Apr 20, 2026 |
| Ubuntu | — | Upgrade qemu-system-xenUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-guiUpgrade qemu-system-riscvUpgrade qemu-system-dataUpgrade qemu-system-x86-xenUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-commonUpgrade qemu-system-modules-spiceUpgrade qemu-system-x86Upgrade qemu-system-modules-opengl | Apr 10, 2026 | Mar 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub