CVE-2016-9846

Description

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.085

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in QEMU 2.5.0	Windows
Multiple Vulnerabilities are affected in QEMU 2.5.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234