Vulnerabilities > Qemu > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-05-11 CVE-2021-3611 A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU.
local
low complexity
qemu redhat
6.5
2022-04-01 CVE-2021-20295 Out-of-bounds Read vulnerability in Qemu
It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059).
local
low complexity
qemu CWE-125
6.5
2022-03-25 CVE-2021-3582 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device.
local
low complexity
qemu debian CWE-119
6.5
2022-03-16 CVE-2021-20257 An infinite loop flaw was found in the e1000 NIC emulator of the QEMU.
local
low complexity
qemu fedoraproject redhat debian
6.5
2022-03-03 CVE-2021-3638 An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU.
local
low complexity
qemu fedoraproject
6.5
2022-02-24 CVE-2021-3607 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0.
local
low complexity
qemu debian fedoraproject CWE-190
6.0
2022-02-24 CVE-2021-3608 Access of Uninitialized Pointer vulnerability in multiple products
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0.
local
low complexity
qemu debian fedoraproject CWE-824
6.0
2022-02-18 CVE-2021-3930 Off-by-one Error vulnerability in multiple products
An off-by-one error was found in the SCSI device emulation in QEMU.
local
low complexity
qemu redhat debian CWE-193
6.5
2022-02-18 CVE-2021-3947 Out-of-bounds Read vulnerability in Qemu 6.0.0/6.1.0/6.2.0
A stack-buffer-overflow was found in QEMU in the NVME component.
local
low complexity
qemu CWE-125
5.5
2022-01-25 CVE-2021-4145 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0.
local
low complexity
qemu redhat CWE-476
6.5