Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.828204 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.828205 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8354 |
vulnerable | 2026-06-08 07:00:24.325323 |
Qemu-kvm: usb: assertion failure in usb_ep_get()
MEDIUM (5.5)
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
Published: 2024-09-19T10:45:06.191Z
Updated: 2025-11-08T08:56:17.010Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6519 |
vulnerable | 2026-06-08 06:58:19.673660 |
Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability
HIGH (8.2)
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
Published: 2024-10-21T14:36:40.115Z
Updated: 2024-10-21T15:49:23.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6505 |
vulnerable | 2026-06-08 06:58:19.616772 |
Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss
MEDIUM (6.8)
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
Published: 2024-07-05T13:51:38.241Z
Updated: 2025-11-08T07:13:50.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26327 |
vulnerable | 2026-06-08 06:31:26.368765 |
Details available
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
Published: 2024-02-19T00:00:00.000Z
Updated: 2024-08-02T00:07:19.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2861 |
vulnerable | 2026-06-08 06:02:43.544084 |
Qemu: 9pfs: improper access control on special files
MEDIUM (6)
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
Published: 2023-12-06T06:19:40.625Z
Updated: 2024-08-02T06:33:05.791Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2680 |
vulnerable | 2026-06-08 06:02:42.818357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12067 |
vulnerable | 2026-06-08 05:12:38.511816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18438 |
vulnerable | 2026-06-08 05:11:13.966638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.