CVE-2024-3447CWE-122

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

Medium · published November 14, 2024

CVSS v3.1
6.0
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00552 · 45.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2024-11-14T12:10Z
EPSS history
Timeline
  • 14 NOV 12:10Z
    Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
    cvelistv5