CVE-2025-14876: Allocation of Resources Without Limits or Throttling
CVE-2025-14876 is a vulnerability in the virtio-crypto device of QEMU version 7.1.0 where a missing length limit in the AKCIPHER path allows a malicious guest OS to trigger uncontrolled memory allocation. This flaw can cause the QEMU process on the host to terminate unexpectedly, resulting in a denial of service (DoS). The vulnerability has a CVSS score of 5.5, indicating medium severity. No known exploits are reported in the wild. There is no explicit vendor advisory content confirming a patch or mitigation status.
AI Analysis
Technical Summary
The vulnerability CVE-2025-14876 affects QEMU 7.1.0's virtio-crypto device. It arises from a missing length limit check in the AKCIPHER path, which a malicious guest operating system can exploit to cause uncontrolled memory allocation on the host. This leads to the QEMU process crashing and a denial of service condition on the host system. The CVSS 3.1 vector indicates the attack requires local access with low privileges and no user interaction, impacting availability only.
Potential Impact
Successful exploitation results in denial of service on the host by causing the QEMU process to terminate unexpectedly. There is no impact on confidentiality or integrity reported. The vulnerability requires local attacker access to the guest OS and does not involve remote exploitation or user interaction.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided Red Hat advisory link does not explicitly state if a patch or workaround is available. Until an official fix is confirmed, limit access to guest OS environments and monitor for abnormal QEMU process terminations.
CVE-2025-14876: Allocation of Resources Without Limits or Throttling
Description
CVE-2025-14876 is a vulnerability in the virtio-crypto device of QEMU version 7.1.0 where a missing length limit in the AKCIPHER path allows a malicious guest OS to trigger uncontrolled memory allocation. This flaw can cause the QEMU process on the host to terminate unexpectedly, resulting in a denial of service (DoS). The vulnerability has a CVSS score of 5.5, indicating medium severity. No known exploits are reported in the wild. There is no explicit vendor advisory content confirming a patch or mitigation status.
CVSS v3.1
Score 5.5medium
Affected software
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 6
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Red Hat OpenShift Container Platform 4
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2025-14876 affects QEMU 7.1.0's virtio-crypto device. It arises from a missing length limit check in the AKCIPHER path, which a malicious guest operating system can exploit to cause uncontrolled memory allocation on the host. This leads to the QEMU process crashing and a denial of service condition on the host system. The CVSS 3.1 vector indicates the attack requires local access with low privileges and no user interaction, impacting availability only.
Potential Impact
Successful exploitation results in denial of service on the host by causing the QEMU process to terminate unexpectedly. There is no impact on confidentiality or integrity reported. The vulnerability requires local attacker access to the guest OS and does not involve remote exploitation or user interaction.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided Red Hat advisory link does not explicitly state if a patch or workaround is available. Until an official fix is confirmed, limit access to guest OS environments and monitor for abnormal QEMU process terminations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fedora
- Date Reserved
- 2025-12-18T10:40:12.917Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69962af36aea4a407ae847db
Added to database: 02/18/2026, 21:11:15 UTC
Last enriched: 06/03/2026, 21:23:35 UTC
Last updated: 09/10/2026, 22:07:50 UTC
Views: 145
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.