CVE-2021-3507CWE-119

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including)

published May 6, 2021

CVSS
—
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.2th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-05-06T15:16Z
EPSS history
Timeline
  • 06 MAY 15:16Z
    A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including)
    cvelistv5