Advisories · Technology

QEMU.

Every CVE that names QEMU among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54567 CVE record

CVSS 4.2 Medium

QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask…
- QEMU
- CWE-684
Not analysed yet 25 Jul 2025
CVE-2025-54566 CVE record

CVSS 4.2 Medium

QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency…
- QEMU
- CWE-642
Not analysed yet 25 Jul 2025
CVE-2023-2680 CVE record

CVSS 7.5 High

Dma reentrancy issue (incomplete fix for cve-2021-3750)
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 13 Sept 2023
CVE-2023-3301 CVE record

CVSS 5.6 Medium

Triggerable assertion due to race condition in hot-unplug
- qemu
- Red Hat Enterprise Linux 6
- Denial of service
Not analysed yet 13 Sept 2023
CVE-2023-3180 CVE record

CVSS 6.0 Medium

Heap buffer overflow in virtio_crypto_sym_op_helper()
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-1386 CVE record

CVSS 3.3 Low

Qemu: 9pfs: suid/sgid bits not dropped on file write
- qemu
- Red Hat Enterprise Linux 6
- CWE-281
Not analysed yet 24 Jul 2023
CVE-2023-3354 CVE record

CVSS 7.5 High

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-0664 CVE record

CVSS 7.8 High

Execution with unnecessary privileges in QEMU
- QEMU
- Privilege escalation
Not analysed yet 29 Mar 2023
CVE-2022-3872 CVE record

CVSS 8.6 High

Off-by-one error in QEMU
- QEMU
- CWE-193
Not analysed yet 7 Nov 2022
CVE-2022-3165 CVE record

CVSS 6.5 Medium

Integer underflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 17 Oct 2022
CVE-2022-2962 CVE record

CVSS 7.8 High

Uncontrolled resource consumption in QEMU
- QEMU
- Denial of service
Not analysed yet 13 Sept 2022
CVE-2021-3735 CVE record

A deadlock issue was found in the AHCI controller device of QEMU.
- QEMU
- CWE-667
Not analysed yet 26 Aug 2022
CVE-2022-0216 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 26 Aug 2022
CVE-2021-3929 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 25 Aug 2022
CVE-2021-4158 CVE record

NULL pointer dereference in QEMU
- QEMU
- Memory corruption
Not analysed yet 24 Aug 2022
CVE-2020-14394 CVE record

Infinite loop in QEMU
- QEMU
- Denial of service
Not analysed yet 17 Aug 2022
CVE-2021-3611 CVE record

Buffer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 11 May 2022
CVE-2021-3750 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 2 May 2022
CVE-2021-4206 CVE record

Integer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 29 Apr 2022
CVE-2021-4207 CVE record

Race condition in QEMU
- QEMU
- Race condition
Not analysed yet 29 Apr 2022
CVE-2021-20295 CVE record

Out-of-bounds read in QEMU
- QEMU
- Memory corruption
Not analysed yet 1 Apr 2022
CVE-2022-1050 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 29 Mar 2022
CVE-2021-3582 CVE record

Buffer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 25 Mar 2022
CVE-2021-20257 CVE record

Infinite loop in QEMU
- QEMU
- Denial of service
Not analysed yet 16 Mar 2022
CVE-2021-3638 CVE record

Out-of-bounds write in QEMU
- QEMU
- Memory corruption
Not analysed yet 3 Mar 2022
CVE-2021-3608 CVE record

Uninitialized pointer access in QEMU
- QEMU
- Memory corruption
Not analysed yet 24 Feb 2022
CVE-2021-3607 CVE record

Integer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 24 Feb 2022
CVE-2021-3947 CVE record

Out-of-bounds read in QEMU
- QEMU
- Memory corruption
Not analysed yet 18 Feb 2022
CVE-2021-3930 CVE record

Off-by-one error in QEMU
- QEMU
- CWE-193
Not analysed yet 18 Feb 2022
CVE-2021-4145 CVE record

NULL pointer dereference in QEMU
- QEMU
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2021-3713 CVE record

Out-of-bounds write in QEMU
- QEMU
- Memory corruption
Not analysed yet 25 Aug 2021
CVE-2021-3682 CVE record

Release of invalid pointer in QEMU
- QEMU
- Memory corruption
Not analysed yet 5 Aug 2021
CVE-2021-3595 CVE record

Uninitialized pointer access in QEMU
- QEMU
- Memory corruption
Not analysed yet 15 Jun 2021
CVE-2021-3594 CVE record

Uninitialized pointer access in QEMU
- QEMU
- Memory corruption
Not analysed yet 15 Jun 2021
CVE-2021-3593 CVE record

Uninitialized pointer access in QEMU
- QEMU
- Memory corruption
Not analysed yet 15 Jun 2021
CVE-2021-3592 CVE record

Uninitialized pointer access in QEMU
- QEMU
- Memory corruption
Not analysed yet 15 Jun 2021
CVE-2021-3546 CVE record

Out-of-bounds write in QEMU
- QEMU
- Memory corruption
Not analysed yet 2 Jun 2021
CVE-2021-3545 CVE record

Use of uninitialized resource in QEMU
- QEMU
- Memory corruption
Not analysed yet 2 Jun 2021
CVE-2021-3544 CVE record

Memory leak in QEMU
- QEMU
- Denial of service
Not analysed yet 2 Jun 2021
CVE-2020-35503 CVE record

NULL pointer dereference in QEMU
- QEMU
- Memory corruption
Not analysed yet 2 Jun 2021
CVE-2013-4536 CVE record

Improper privilege management in qemu
- qemu
- Privilege escalation
Not analysed yet 28 May 2021
CVE-2020-35506 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 28 May 2021
CVE-2020-35505 CVE record

NULL pointer dereference in QEMU
- QEMU
- Memory corruption
Not analysed yet 28 May 2021
CVE-2020-35504 CVE record

NULL pointer dereference in QEMU
- QEMU
- Memory corruption
Not analysed yet 28 May 2021
CVE-2021-20196 CVE record

NULL pointer dereference in qemu
- qemu
- Memory corruption
Not analysed yet 26 May 2021
CVE-2021-3527 CVE record

Resource allocation without limits in QEMU
- QEMU
- Denial of service
Not analysed yet 26 May 2021
CVE-2021-20221 CVE record

Out-of-bounds read in qemu
- qemu
- Memory corruption
Not analysed yet 13 May 2021
CVE-2021-20181 CVE record

Time-of-check time-of-use race condition in qemu
- qemu
- Race condition
Not analysed yet 13 May 2021
CVE-2021-3507 CVE record

Buffer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 6 May 2021
CVE-2021-3409 CVE record

Buffer overflow in QEMU
- QEMU
- Memory corruption
Not analysed yet 23 Mar 2021
CVE-2021-3392 CVE record

Use after free in QEMU
- QEMU
- Memory corruption
Not analysed yet 23 Mar 2021
CVE-2021-3416 CVE record

Infinite loop in QEMU
- QEMU
- Denial of service
Not analysed yet 18 Mar 2021
CVE-2021-20255 CVE record

Infinite loop in QEMU
- QEMU
- Denial of service
Not analysed yet 9 Mar 2021
CVE-2021-20263 CVE record

A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU.
- QEMU
- CWE-281
Not analysed yet 9 Mar 2021
CVE-2021-20203 CVE record

Integer overflow in qemu
- qemu
- Memory corruption
Not analysed yet 25 Feb 2021
CVE-2020-35517 CVE record

Improper privilege management in qemu
- qemu
- Privilege escalation
Not analysed yet 28 Jan 2021
CVE-2020-27821 CVE record

Out-of-bounds write in QEMU
- QEMU
- Memory corruption
Not analysed yet 8 Dec 2020
CVE-2020-25723 CVE record

Reachable assertion in QEMU
- QEMU
- Denial of service
Not analysed yet 2 Dec 2020
CVE-2020-14364 CVE record

Out-of-bounds read in QEMU
- QEMU
- Memory corruption
Not analysed yet 31 Aug 2020
CVE-2020-10702 CVE record

CVSS 5.5 Medium

qemu: A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth)…
- qemu
- CWE-325
Not analysed yet 4 Jun 2020