CVE-2026-57965CWE-190

Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

Medium · published June 29, 2026

CVSS v3.1
5.1
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.4th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-06-29T07:53Z
EPSS history
Timeline
  • 29 JUN 07:53Z
    Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow
    cvelistv5