QE
Vendor
Qemu
419
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54567 | QE Qemu Qemu | 5.4 | Jul 25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327 |
| CVE-2025-54566 | QE Qemu Qemu | 5.4 | Jul 25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327 |
| CVE-2024-7730 | QE Qemu Qemu | 7.8 | Nov 14 | A heap buffer overflow was found in the virtio-snd device in QEMU |
| CVE-2024-3447 | QE Qemu Qemu | 6.0 | Nov 14 | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU |
| CVE-2024-6519 | QE Qemu Qemu | 8.2 | Oct 21 | A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation |
| CVE-2024-8354 | QE Qemu Qemu | 5.5 | Sep 19 | A flaw was found in QEMU |
| CVE-2024-6505 | QE Qemu Qemu | 6.8 | Jul 5 | A flaw was found in the virtio-net device in QEMU |
| CVE-2024-3567 | QE Qemu Qemu | 5.5 | Apr 10 | A flaw was found in QEMU |
| CVE-2024-24474 | QE Qemu Qemu | 8.8 | Feb 20 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO… |
| CVE-2024-26328 | QE Qemu Qemu | 6.0 | Feb 19 | An issue was discovered in QEMU 7.1.0 through 8.2.1 |
| CVE-2024-26327 | QE Qemu Qemu | 5.3 | Feb 19 | An issue was discovered in QEMU 7.1.0 through 8.2.1 |
| CVE-2023-6683 | QE Qemu Qemu | 6.5 | Jan 12 | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages |
| CVE-2023-6693 | QE Qemu Qemu | 5.3 | Jan 2 | A stack based buffer overflow was found in the virtio-net device of QEMU |
| CVE-2023-2861 | QE Qemu Qemu | 7.1 | Dec 6 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU |
| CVE-2023-5088 | QE Qemu Qemu | 7.0 | Nov 3 | A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code) |
| CVE-2023-3301 | QE Qemu Qemu | 5.6 | Sep 13 | A flaw was found in QEMU |
| CVE-2023-3255 | QE Qemu Qemu | 6.5 | Sep 13 | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages |
| CVE-2023-2680 | QE Qemu Qemu | 8.2 | Sep 13 | This CVE exists because of an incomplete fix for CVE-2021-3750 |
| CVE-2023-42467 | QE Qemu Qemu | 5.5 | Sep 11 | QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being… |
| CVE-2020-24165 | QE Qemu Qemu | 8.8 | Aug 28 | An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS) |
| CVE-2022-36648 | QE Qemu Qemu | 10.0 | Aug 22 | The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially… |
| CVE-2023-40360 | QE Qemu Qemu | 5.5 | Aug 14 | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking… |
| CVE-2023-4135 | QE Qemu Qemu | 6.5 | Aug 4 | A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU |
| CVE-2023-3180 | QE Qemu Qemu | 6.5 | Aug 3 | A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req |
| CVE-2023-3019 | QE Qemu Qemu | 6.5 | Jul 24 | A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU |
| CVE-2023-1386 | QE Qemu Qemu | 7.8 | Jul 24 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU |
| CVE-2023-3354 | QE Qemu Qemu | 7.5 | Jul 11 | A flaw was found in the QEMU built-in VNC server |
| CVE-2023-0664 | QE Qemu Qemu | 7.8 | Mar 29 | A flaw was found in the QEMU Guest Agent service for Windows |
| CVE-2023-1544 | QE Qemu Qemu | 6.3 | Mar 23 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device |
| CVE-2023-0330 | QE Qemu Qemu | 6.0 | Mar 6 | A vulnerability in the lsi53c895a device affects the latest version of qemu |
| CVE-2022-4172 | QE Qemu Qemu | 6.5 | Nov 29 | An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record()… |
| CVE-2022-4144 | QE Qemu Qemu | 6.5 | Nov 29 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU |
| CVE-2022-3872 | QE Qemu Qemu | 8.6 | Nov 7 | An off-by-one read/write issue was found in the SDHCI device of QEMU |
| CVE-2022-3165 | QE Qemu Qemu | 6.5 | Oct 17 | An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format |
| CVE-2014-0144 | QE Qemu Qemu | 8.6 | Sep 29 | QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused… |
| CVE-2022-2962 | QE Qemu Qemu | 7.8 | Sep 13 | A DMA reentrancy issue was found in the Tulip device emulation in QEMU |
| CVE-2022-0358 | QE Qemu Qemu | 7.8 | Aug 29 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation |
| CVE-2022-0216 | QE Qemu Qemu | 4.4 | Aug 26 | A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU |
| CVE-2021-3735 | QE Qemu Qemu | 4.4 | Aug 26 | A deadlock issue was found in the AHCI controller device of QEMU |
| CVE-2021-3929 | QE Qemu Qemu | 8.2 | Aug 25 | A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU |
| CVE-2021-4158 | QE Qemu Qemu | 6.0 | Aug 24 | A NULL pointer dereference issue was found in the ACPI code of QEMU |
| CVE-2020-14394 | QE Qemu Qemu | 3.2 | Aug 17 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring |
| CVE-2022-35414 | QE Qemu Qemu | 8.8 | Jul 11 | softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash |
| CVE-2021-3611 | QE Qemu Qemu | 6.5 | May 11 | A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU |
| CVE-2021-3750 | QE Qemu Qemu | 8.2 | May 2 | A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU |
| CVE-2021-4207 | QE Qemu Qemu | 8.2 | Apr 29 | A flaw was found in the QXL display device emulation in QEMU |
| CVE-2021-4206 | QE Qemu Qemu | 8.2 | Apr 29 | A flaw was found in the QXL display device emulation in QEMU |
| CVE-2021-20295 | QE Qemu Qemu | 6.5 | Apr 1 | It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise… |
| CVE-2022-1050 | QE Qemu Qemu | 8.8 | Mar 29 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device |
| CVE-2021-3582 | QE Qemu Qemu | 6.5 | Mar 25 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device |
| CVE-2021-3748 | QE Qemu Qemu | 7.5 | Mar 23 | A use-after-free vulnerability was found in the virtio-net device of QEMU |
| CVE-2022-26354 | QE Qemu Qemu | 3.2 | Mar 16 | A flaw was found in the vhost-vsock device of QEMU |
| CVE-2022-26353 | QE Qemu Qemu | 7.5 | Mar 16 | A flaw was found in the virtio-net device of QEMU |
| CVE-2021-20257 | QE Qemu Qemu | 6.5 | Mar 16 | An infinite loop flaw was found in the e1000 NIC emulator of the QEMU |
| CVE-2021-3638 | QE Qemu Qemu | 6.5 | Mar 3 | An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU |
| CVE-2021-3608 | QE Qemu Qemu | 6.0 | Feb 24 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 |
| CVE-2021-3607 | QE Qemu Qemu | 6.0 | Feb 24 | An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 |
| CVE-2021-3947 | QE Qemu Qemu | 5.5 | Feb 18 | A stack-buffer-overflow was found in QEMU in the NVME component |
| CVE-2021-3930 | QE Qemu Qemu | 6.5 | Feb 18 | An off-by-one error was found in the SCSI device emulation in QEMU |
| CVE-2021-4145 | QE Qemu Qemu | 6.5 | Jan 25 | A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0 |