CVE-2021-3544CWE-401

Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0

published June 2, 2021

CVSS
—
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.8th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2021-06-02T13:30Z
EPSS history
Timeline
  • 02 JUN 13:30Z
    Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0
    cvelistv5