CVE-2021-3611CWE-119

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU

published May 11, 2022

CVSS
—
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2022-05-11T15:23Z
EPSS history
Timeline
  • 11 MAY 15:23Z
    A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU
    cvelistv5