CVE-2016-9912

Description

Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in virtio_gpu_resource_destroy. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.111

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in QEMU 2.5.0	Windows
Multiple Vulnerabilities are affected in QEMU 2.5.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234