# QEMU.

Every CVE that names QEMU among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask…](https://agentprime.io/advisories/CVE-2025-54567.md)
  `CVE-2025-54567` · CVE record: QEMU QEMU · CVSS 4.2 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-684
- [QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency…](https://agentprime.io/advisories/CVE-2025-54566.md)
  `CVE-2025-54566` · CVE record: QEMU QEMU · CVSS 4.2 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-642
- [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md)
  `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption
- [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md)
  `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md)
  `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md)
  `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281
- [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md)
  `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption
- [Execution with unnecessary privileges in QEMU](https://agentprime.io/advisories/CVE-2023-0664.md)
  `CVE-2023-0664` · CVE record: QEMU · CVSS 7.8 High · Not analysed yet · Published 29 Mar 2023 · Tags: Privilege escalation
- [Off-by-one error in QEMU](https://agentprime.io/advisories/CVE-2022-3872.md)
  `CVE-2022-3872` · CVE record: QEMU · CVSS 8.6 High · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-193
- [Integer underflow in QEMU](https://agentprime.io/advisories/CVE-2022-3165.md)
  `CVE-2022-3165` · CVE record: QEMU · CVSS 6.5 Medium · Not analysed yet · Published 17 Oct 2022 · Tags: Memory corruption
- [Uncontrolled resource consumption in QEMU](https://agentprime.io/advisories/CVE-2022-2962.md)
  `CVE-2022-2962` · CVE record: QEMU · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022 · Tags: Denial of service
- [A deadlock issue was found in the AHCI controller device of QEMU.](https://agentprime.io/advisories/CVE-2021-3735.md)
  `CVE-2021-3735` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: CWE-667
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2022-0216.md)
  `CVE-2022-0216` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: Memory corruption
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2021-3929.md)
  `CVE-2021-3929` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Memory corruption
- [NULL pointer dereference in QEMU](https://agentprime.io/advisories/CVE-2021-4158.md)
  `CVE-2021-4158` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 24 Aug 2022 · Tags: Memory corruption
- [Infinite loop in QEMU](https://agentprime.io/advisories/CVE-2020-14394.md)
  `CVE-2020-14394` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 17 Aug 2022 · Tags: Denial of service
- [Buffer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-3611.md)
  `CVE-2021-3611` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 11 May 2022 · Tags: Memory corruption
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2021-3750.md)
  `CVE-2021-3750` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 May 2022 · Tags: Memory corruption
- [Integer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-4206.md)
  `CVE-2021-4206` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 29 Apr 2022 · Tags: Memory corruption
- [Race condition in QEMU](https://agentprime.io/advisories/CVE-2021-4207.md)
  `CVE-2021-4207` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 29 Apr 2022 · Tags: Race condition
- [Out-of-bounds read in QEMU](https://agentprime.io/advisories/CVE-2021-20295.md)
  `CVE-2021-20295` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 1 Apr 2022 · Tags: Memory corruption
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2022-1050.md)
  `CVE-2022-1050` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 29 Mar 2022 · Tags: Memory corruption
- [Buffer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-3582.md)
  `CVE-2021-3582` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 25 Mar 2022 · Tags: Memory corruption
- [Infinite loop in QEMU](https://agentprime.io/advisories/CVE-2021-20257.md)
  `CVE-2021-20257` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 16 Mar 2022 · Tags: Denial of service
- [Out-of-bounds write in QEMU](https://agentprime.io/advisories/CVE-2021-3638.md)
  `CVE-2021-3638` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 3 Mar 2022 · Tags: Memory corruption
- [Uninitialized pointer access in QEMU](https://agentprime.io/advisories/CVE-2021-3608.md)
  `CVE-2021-3608` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 24 Feb 2022 · Tags: Memory corruption
- [Integer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-3607.md)
  `CVE-2021-3607` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 24 Feb 2022 · Tags: Memory corruption
- [Out-of-bounds read in QEMU](https://agentprime.io/advisories/CVE-2021-3947.md)
  `CVE-2021-3947` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: Memory corruption
- [Off-by-one error in QEMU](https://agentprime.io/advisories/CVE-2021-3930.md)
  `CVE-2021-3930` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: CWE-193
- [NULL pointer dereference in QEMU](https://agentprime.io/advisories/CVE-2021-4145.md)
  `CVE-2021-4145` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [Out-of-bounds write in QEMU](https://agentprime.io/advisories/CVE-2021-3713.md)
  `CVE-2021-3713` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption
- [Release of invalid pointer in QEMU](https://agentprime.io/advisories/CVE-2021-3682.md)
  `CVE-2021-3682` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 5 Aug 2021 · Tags: Memory corruption
- [Uninitialized pointer access in QEMU](https://agentprime.io/advisories/CVE-2021-3595.md)
  `CVE-2021-3595` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 15 Jun 2021 · Tags: Memory corruption
- [Uninitialized pointer access in QEMU](https://agentprime.io/advisories/CVE-2021-3594.md)
  `CVE-2021-3594` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 15 Jun 2021 · Tags: Memory corruption
- [Uninitialized pointer access in QEMU](https://agentprime.io/advisories/CVE-2021-3593.md)
  `CVE-2021-3593` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 15 Jun 2021 · Tags: Memory corruption
- [Uninitialized pointer access in QEMU](https://agentprime.io/advisories/CVE-2021-3592.md)
  `CVE-2021-3592` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 15 Jun 2021 · Tags: Memory corruption
- [Out-of-bounds write in QEMU](https://agentprime.io/advisories/CVE-2021-3546.md)
  `CVE-2021-3546` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 Jun 2021 · Tags: Memory corruption
- [Use of uninitialized resource in QEMU](https://agentprime.io/advisories/CVE-2021-3545.md)
  `CVE-2021-3545` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 Jun 2021 · Tags: Memory corruption
- [Memory leak in QEMU](https://agentprime.io/advisories/CVE-2021-3544.md)
  `CVE-2021-3544` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 Jun 2021 · Tags: Denial of service
- [NULL pointer dereference in QEMU](https://agentprime.io/advisories/CVE-2020-35503.md)
  `CVE-2020-35503` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 Jun 2021 · Tags: Memory corruption
- [Improper privilege management in qemu](https://agentprime.io/advisories/CVE-2013-4536.md)
  `CVE-2013-4536` · CVE record: qemu · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: Privilege escalation
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2020-35506.md)
  `CVE-2020-35506` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: Memory corruption
- [NULL pointer dereference in QEMU](https://agentprime.io/advisories/CVE-2020-35505.md)
  `CVE-2020-35505` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: Memory corruption
- [NULL pointer dereference in QEMU](https://agentprime.io/advisories/CVE-2020-35504.md)
  `CVE-2020-35504` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: Memory corruption
- [NULL pointer dereference in qemu](https://agentprime.io/advisories/CVE-2021-20196.md)
  `CVE-2021-20196` · CVE record: qemu · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: Memory corruption
- [Resource allocation without limits in QEMU](https://agentprime.io/advisories/CVE-2021-3527.md)
  `CVE-2021-3527` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: Denial of service
- [Out-of-bounds read in qemu](https://agentprime.io/advisories/CVE-2021-20221.md)
  `CVE-2021-20221` · CVE record: qemu · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Memory corruption
- [Time-of-check time-of-use race condition in qemu](https://agentprime.io/advisories/CVE-2021-20181.md)
  `CVE-2021-20181` · CVE record: qemu · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Race condition
- [Buffer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-3507.md)
  `CVE-2021-3507` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 6 May 2021 · Tags: Memory corruption
- [Buffer overflow in QEMU](https://agentprime.io/advisories/CVE-2021-3409.md)
  `CVE-2021-3409` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 23 Mar 2021 · Tags: Memory corruption
- [Use after free in QEMU](https://agentprime.io/advisories/CVE-2021-3392.md)
  `CVE-2021-3392` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 23 Mar 2021 · Tags: Memory corruption
- [Infinite loop in QEMU](https://agentprime.io/advisories/CVE-2021-3416.md)
  `CVE-2021-3416` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 18 Mar 2021 · Tags: Denial of service
- [Infinite loop in QEMU](https://agentprime.io/advisories/CVE-2021-20255.md)
  `CVE-2021-20255` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 9 Mar 2021 · Tags: Denial of service
- [A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU.](https://agentprime.io/advisories/CVE-2021-20263.md)
  `CVE-2021-20263` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 9 Mar 2021 · Tags: CWE-281
- [Integer overflow in qemu](https://agentprime.io/advisories/CVE-2021-20203.md)
  `CVE-2021-20203` · CVE record: qemu · No CVSS score · Not analysed yet · Published 25 Feb 2021 · Tags: Memory corruption
- [Improper privilege management in qemu](https://agentprime.io/advisories/CVE-2020-35517.md)
  `CVE-2020-35517` · CVE record: qemu · No CVSS score · Not analysed yet · Published 28 Jan 2021 · Tags: Privilege escalation
- [Out-of-bounds write in QEMU](https://agentprime.io/advisories/CVE-2020-27821.md)
  `CVE-2020-27821` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 8 Dec 2020 · Tags: Memory corruption
- [Reachable assertion in QEMU](https://agentprime.io/advisories/CVE-2020-25723.md)
  `CVE-2020-25723` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 2 Dec 2020 · Tags: Denial of service
- [Out-of-bounds read in QEMU](https://agentprime.io/advisories/CVE-2020-14364.md)
  `CVE-2020-14364` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 31 Aug 2020 · Tags: Memory corruption
- [qemu: A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth)…](https://agentprime.io/advisories/CVE-2020-10702.md)
  `CVE-2020-10702` · CVE record: The QEMU Project qemu · CVSS 5.5 Medium · Not analysed yet · Published 4 Jun 2020 · Tags: CWE-325

Older: <https://agentprime.io/advisories/technology/qemu.md?cursor=WyIyMDIwLTA2LTA0VDE3OjMxOjA1LjAwMDAwMFoiLCJDVkUtMjAyMC0xMDcwMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qemu>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qemu/>. Everything for agents: <https://agentprime.io/llms.txt>.