QE
Product
QEMU
419
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 83Medium 221Low 26
Watch
Add QEMU to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15746 | 5.5 | Aug 29 | qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main… Affected: through 3.0.1 |
| CVE-2018-7858 | 5.5 | Mar 12 | Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and… Affected: through 2.11.2 |
| CVE-2017-18043 | 5.5 | Jan 31 | Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash) Affected: 1.5.0 through 2.10.1 |
| CVE-2014-3471 | 5.5 | Jan 12 | Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug… Affected: through 2.1.2; 2.1.2 |
| CVE-2017-13672 | 5.5 | Sep 1 | QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU… Affected: through 2.10.2 |
| CVE-2014-0146 | 5.5 | Aug 10 | The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted… Affected: through 1.7.1; 2.0.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2014-0142 | 5.5 | Aug 10 | QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector… Affected: through 2.0.0 |
| CVE-2017-10806 | 5.5 | Aug 2 | Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to… Affected: through 2.9.1 |
| CVE-2017-11434 | 5.5 | Jul 25 | The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a… Affected: through 2.9.1; 2.10.0; 2.10.0; 2.10.0; 2.10.0 |
| CVE-2017-9503 | 5.5 | Jun 16 | QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL… Affected: through 2.9.1 |
| CVE-2017-9375 | 5.5 | Jun 16 | QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via… Affected: through 2.8.1.1 |
| CVE-2017-9374 | 5.5 | Jun 16 | Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by… Affected: through 2.8.1.1 |
| CVE-2017-9373 | 5.5 | Jun 16 | Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by… Affected: through 2.8.1.1; 2.9.0 |
| CVE-2017-9060 | 5.5 | Jun 1 | Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory… Affected: through 2.8.1.1 |
| CVE-2017-7718 | 5.5 | Apr 20 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via… Affected: through 2.8.1.1; 2.9.0 |
| CVE-2017-5973 | 5.5 | Mar 27 | The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process… Affected: through 2.8.1.1 |
| CVE-2016-9922 | 5.5 | Mar 27 | The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of… Affected: through 2.7.1; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2017-5987 | 5.5 | Mar 20 | The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and… Affected: through 2.8.1.1; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0 |
| CVE-2017-5898 | 5.5 | Mar 15 | Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows… Affected: through 2.8.1.1 |
| CVE-2016-10029 | 5.5 | Feb 27 | The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service… Affected: through 2.6.2 |
| CVE-2016-10028 | 5.5 | Feb 27 | The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a… Affected: through 2.8.1.1 |
| CVE-2016-9776 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue Affected: through 2.7.1; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2016-2198 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw Affected: through 2.5.1.1; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2016-2197 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw Affected: through 2.5.1.1 |
| CVE-2016-1981 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue Affected: through 2.5.1.1 |
| CVE-2016-1922 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw Affected: through 2.5.1.1 |
| CVE-2015-8818 | 5.5 | Dec 29 | The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause… Affected: through 2.3.1 |
| CVE-2015-8817 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.1; 1.6.2; +20 more |
| CVE-2015-8745 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue Affected: through 2.4.1 |
| CVE-2015-8744 | 5.5 | Dec 29 | QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue Affected: through 2.4.1 |
| CVE-2016-9923 | 5.5 | Dec 23 | Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue Affected: through 2.7.1 |
| CVE-2016-5403 | 5.5 | Aug 2 | The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by… Affected: through 2.6.0; 2.7.0 |
| CVE-2016-5337 | 5.5 | Jun 14 | The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading… Affected: through 2.6.2 |
| CVE-2015-8558 | 5.5 | May 23 | The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular… Affected: through 2.5.1.1 |
| CVE-2016-3712 | 5.5 | May 11 | Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE… Affected: through 2.5.1; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2015-5158 | 5.5 | Apr 12 | Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of… Affected: 2.2.0 before 2.4.0; 2.4.0; 2.4.0; 2.4.0 |
| CVE-2025-54567 | 5.4 | Jul 25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327 Affected: 10.0.0 through 10.0.3 |
| CVE-2025-54566 | 5.4 | Jul 25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327 Affected: 10.0.0 through 10.0.3 |
| CVE-2024-26327 | 5.3 | Feb 19 | An issue was discovered in QEMU 7.1.0 through 8.2.1 Affected: 7.1.0 through 8.2.1 |
| CVE-2023-6693 | 5.3 | Jan 2 | A stack based buffer overflow was found in the virtio-net device of QEMU Affected: before 8.2.1 |
| CVE-2020-25625 | 5.3 | Sep 25 | hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop Affected: 5.0.0 |
| CVE-2020-15863 | 5.3 | Jul 28 | hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow Affected: through 5.0.0; 5.1.0 |
| CVE-2018-16872 | 5.3 | Dec 13 | A flaw was found in qemu Media Transfer Protocol (MTP) Affected: through 3.1.0 |
| CVE-2020-25624 | 5.0 | Nov 30 | hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver Affected: 5.0.0 |
| CVE-2020-25085 | 5.0 | Sep 25 | QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case Affected: 5.0.0 |
| CVE-2020-14364 | 5.0 | Aug 31 | An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0 Affected: before 5.2.0 |
| CVE-2020-10761 | 5.0 | Jun 9 | An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1 Affected: before 5.0.1 |
| CVE-2016-2391 | 5.0 | Jun 16 | The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer… Affected: through 2.5.1.1 |
| CVE-2018-19489 | 4.7 | Dec 13 | v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming Affected: through 3.0.0; 3.1.0; 3.1.0; 3.1.0 |
| CVE-2022-0216 | 4.4 | Aug 26 | A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU Affected: before 6.0.0 |