CVE-2016-9846

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue

published December 29, 2016

CVSS
—
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00418 · 34.8th percentile
Published
2016-12-29T22:00Z
EPSS history
Timeline
  • 29 DEC 22:00Z
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue
    cvelistv5