A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memory_map() returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in unauthorized access to guest memory or corruption of heap-allocated objects, potentially causing information disclosure, data integrity issues, or a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-dbusUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-hostUpgrade qemu-armUpgrade qemu-block-nfsUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-dbusUpgrade qemu-block-rbdUpgrade qemu-headlessUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-SLOFUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-pr-helperUpgrade qemu-vmsr-helperUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-pipewireUpgrade qemu-seabiosUpgrade qemu-spiceUpgrade qemu-imgUpgrade qemu-audio-alsaUpgrade qemu-accel-tcg-x86 | Jun 17, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-guiUpgrade qemu-system-riscvUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-commonUpgrade qemu-system-sparcUpgrade qemu-system-dataUpgrade qemu-system-x86-xenUpgrade qemu-system-ppcUpgrade qemu-system-modules-spiceUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-xenUpgrade qemu-system-modules-opengl | Apr 10, 2026 | Mar 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub