CVE-2018-16847CWE-787

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU

High · published November 2, 2018

CVSS v3.0
7.0
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2018-11-02T22:00Z
EPSS history
Timeline
  • 02 NOV 22:00Z
    An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU
    cvelistv5