Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
CVSS Information
N/A
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
QEMU 安全漏洞
Vulnerability Description
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。 QEMU v6.0.0 之前版本存在安全漏洞，该漏洞源于 cursor_alloc（） 中的整数溢出可能导致堆缓冲区溢出。恶意特权攻击者利用此漏洞可在主机上使 QEMU 进程崩溃，或者可能在 QEMU 进程的上下文中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A