Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-3842 →
Catégories
DEBIAN-CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This oc...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memory_map() returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in unauthorized access to guest memory or corruption of heap-allocated objects, potentially causing information disclosure, data integrity issues, or a denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13 qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.0.10+ds-0+deb13u1"}]}]
Debian:14 qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.2.2+ds-1"}]}]

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus