Approved changes feed: RSS · Atom

cpe:2.3:a:qemu:qemu:*:-:*:*:*:*:*:*

part: a version: * update: -

VendorQemu (dc79796f-803a-5e2c-8ac2-933a08531b40)
ProductQemu (741928e6-f439-57f2-bcb7-48ccc5351068)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24474 vulnerable 2026-06-08 06:29:41.425378 Details available
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.
Published: 2024-02-20T00:00:00.000Z
Updated: 2024-08-15T20:20:15.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0150 vulnerable 2026-06-08 05:05:11.809512 Details available
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
Published: 2014-04-18T14:00:00.000Z
Updated: 2024-08-06T09:05:39.095Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.