This vulnerability involves a stack-based buffer overflow in the QEMU e1000 network device's receive code, specifically in the e1000_receive_iov() function when handling short frames in loopback mode. The code for padding short frames was moved to the net core, but the e1000 device still processes short frames, causing a buffer overrun. Exploitation by a malicious guest user can crash the QEMU process on the host, resulting in denial of service. The CVSS 3.1 score is 6.2 (medium severity) with attack vector local, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.

The vulnerability allows a malicious guest user to cause a denial of service by crashing the QEMU process on the host through a stack-based buffer overflow in the e1000 network device's receive code. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-12464 for current remediation guidance. Until an official fix is confirmed, consider restricting untrusted guest access or disabling the affected network device if feasible to reduce risk.