QEMU 8.1.0 Release Candidate 0
Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:8.1.0:rc0:*:*:*:*:*:*
part: a version: 8.1.0 update: rc0
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.933340 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.933341 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4135 |
vulnerable | 2026-06-08 06:16:11.573410 |
Out-of-bounds read information disclosure vulnerability
MEDIUM (6)
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
Published: 2023-08-04T13:19:15.760Z
Updated: 2024-08-02T07:17:11.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3354 |
vulnerable | 2026-06-08 06:09:39.360989 |
Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
HIGH (7.5)
A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
Published: 2023-07-11T16:16:56.294Z
Updated: 2025-02-13T16:55:08.379Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3180 |
vulnerable | 2026-06-08 06:09:38.778921 |
Heap buffer overflow in virtio_crypto_sym_op_helper()
MEDIUM (6)
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
Published: 2023-08-03T14:31:36.083Z
Updated: 2024-09-25T19:56:37.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.