CVE-2022-1050CWE-416
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device
published March 29, 2022
What it is
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00380 · 30.8th percentile
- Weakness
- CWE-416 · Use After Free
- Published
- 2022-03-29T00:00Z
EPSS history
Timeline