CVE-2020-13765

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid…

published June 4, 2020

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.3th percentile
Published
2020-06-04T15:26Z
EPSS history
Timeline
  • 04 JUN 15:26Z
    rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid…
    cvelistv5