QEMU 8.1.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:8.1.0:rc2:*:*:*:*:*:*
part: a version: 8.1.0 update: rc2
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.933345 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.933347 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4135 |
vulnerable | 2026-06-08 06:16:11.575432 |
Out-of-bounds read information disclosure vulnerability
MEDIUM (6)
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
Published: 2023-08-04T13:19:15.760Z
Updated: 2024-08-02T07:17:11.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3180 |
vulnerable | 2026-06-08 06:09:38.780732 |
Heap buffer overflow in virtio_crypto_sym_op_helper()
MEDIUM (6)
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
Published: 2023-08-03T14:31:36.083Z
Updated: 2024-09-25T19:56:37.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.