Vulnerabilities > CVE-2023-40360 - NULL Pointer Dereference vulnerability in Qemu
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |