Skip to main content
VulnerabilityPublished Updated

Qemu: Heap-buffer-overflow

Affects qemuSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 12 Aug 2026, 17:56 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzqemupkg:generic/qemuOther threatsAffected
  • >=0e042025b9fe262316f29e4b8ec47f0b85c24e5f
  • =v6.2.0
  • =v6.2.0-rc0
  • =v6.2.0-rc1
  • =v6.2.0-rc3
  • =v6.2.0-rc4
  • =v7.0.0
  • =v7.0.0-rc0
  • =v7.0.0-rc1
  • =v7.0.0-rc2
  • =v7.0.0-rc3
  • =v7.0.0-rc4
  • =v7.1.0
  • =v7.1.0-rc0
  • =v7.1.0-rc1
  • =v7.1.0-rc2
  • =v7.1.0-rc3
  • =v7.1.0-rc4
  • =v7.2.0-rc0
  • =v7.2.0-rc1
  • =v7.2.0-rc2
  • =v7.2.0-rc3
  • =v7.2.0-rc4
  • =v7.2.0
  • =v8.0.0-rc0
  • =v8.0.0-rc1
  • =v8.0.0-rc2
  • =v7.2.1
  • =v8.0.0-rc3
  • =v8.0.0-rc4
  • =v8.0.0
  • =v7.2.2
  • =v7.2.3
  • =v8.0.1
  • =v8.0.2
  • =v7.2.4
  • =v8.0.3
  • =v8.1.0-rc0
  • =v8.1.0-rc1
  • =v8.1.0-rc2
  • =v7.2.5
  • =v8.0.4
  • =v8.1.0-rc3
  • =v8.1.0-rc4
  • =v8.1.0
  • =v7.2.6
  • =v8.0.5
  • =v8.1.1
  • =v8.1.2
  • =v8.2.0-rc0
  • =v7.2.7
  • =v8.1.3
  • =v8.2.0-rc1
  • =v8.2.0-rc2
  • =v8.2.0-rc3
  • =v8.2.0-rc4
  • =v8.2.0
  • =v7.2.8
  • =v8.1.4
  • =v7.2.9
  • =v8.1.5
  • =v8.2.1
  • =v7.2.10
  • =v8.2.2
  • =v9.0.0-rc0
  • =v9.0.0-rc1
  • =v9.0.0-rc2
  • =v9.0.0-rc3
  • =v9.0.0-rc4
  • =v7.2.11
  • =v8.2.3
  • =v9.0.0
  • =v8.2.4
  • =v7.2.12
  • =v8.2.5
  • =v9.0.1
  • =v7.2.13
  • =v8.2.6
  • =v9.0.2
  • =v9.1.0-rc0
  • =v9.1.0-rc1
  • =v9.1.0-rc2
  • =v9.1.0-rc3
  • =v9.1.0-rc4
  • =v9.1.0
  • =v7.2.14
  • =v8.2.7
  • =v9.0.3
  • =v9.1.1
  • =v9.2.0-rc0
  • =v7.2.15
  • =v8.2.8
  • =v9.0.4
  • =v9.1.2
  • =v9.2.0-rc1
  • =v9.2.0-rc2
  • =v9.2.0-rc3
  • =v9.2.0
  • =v7.2.16
  • =v8.2.9
  • =v9.1.3
  • =v9.2.1
  • =v9.2.2
  • =v10.0.0-rc0
  • =v10.0.0-rc1
  • =v7.2.17
  • =v8.2.10
  • =v9.2.3
  • =v10.0.0-rc2
  • =v10.0.0-rc3
  • =v10.0.0-rc4
  • =v10.0.0
  • =v10.0.1
  • =v7.2.18
  • =v9.2.4
  • =v10.0.2
  • =v10.0.3
  • =v10.1.0-rc0
  • =v7.2.19
  • =v10.0.4
  • =v10.1.0
  • =v10.1.0-rc1
  • =v10.1.0-rc2
  • =v10.1.0-rc3
  • =v10.1.0-rc4
  • =v7.2.20
  • =v10.0.5
  • =v10.1.1
  • =v7.2.21
  • =v10.0.6
  • =v10.1.2
  • =v10.2.0-rc1
  • =v10.2.0-rc2
  • =v10.0.7
  • =v10.1.3
  • =v7.2.22
  • =v10.2.0-rc3
  • =v10.2.0-rc4
  • =v10.2.0
  • =v10.0.8
  • =v10.1.4
  • =v10.2.1
  • =v10.0.9
  • =v10.1.5
  • =v10.2.2
  • =v11.0.0-rc0
  • =v11.0.0-rc1
  • =v11.0.0-rc2
  • =v11.0.0-rc3
  • =v11.0.0-rc4
  • =v11.0.0
  • =v10.0.10
  • =v10.2.3
  • =v11.0.1
  • =v10.0.11
  • =v10.2.4
  • =v11.0.2
  • =v10.0.12
  • =v11.0.3
  • =v11.1.0-rc0
  • =v11.1.0-rc1
  • =v11.1.0-rc2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A heap-buffer-overflow vulnerability was identified in QEMU's megasas_map_sgl function, reported by OSS-Fuzz. The issue involves a read overflow of 4 bytes on the heap, potentially leading to memory corruption. The vulnerability affects many specific QEMU versions from 6.2.0 through 11.1.0-rc2 and later commits. No CVSS score or vendor patch information is provided. The severity is assessed as medium based on the nature of the overflow and lack of known exploits.

References

Community reviews

Loading reviews…