Known Vulnerabilities for products from QEMU
Listed below are 20 of the newest known vulnerabilities associated with the vendor "QEMU".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49237 json | Not Provided | 2026-05-28 | 2026-05-28 | |
| CVE-2026-46260 json | Not Provided | 2026-06-03 | 2026-06-03 | |
| CVE-2026-46251 json | Not Provided | 2026-06-03 | 2026-06-03 | |
| CVE-2026-46133 json | Not Provided | 2026-05-28 | 2026-06-01 | |
| CVE-2026-46116 json | Not Provided | 2026-05-28 | 2026-05-30 | |
| CVE-2026-46079 json | Not Provided | 2026-05-27 | 2026-06-01 | |
| CVE-2026-46072 json | Not Provided | 2026-05-27 | 2026-06-01 | |
| CVE-2026-46062 json | Not Provided | 2026-05-27 | 2026-06-01 | |
| CVE-2026-45965 json | Not Provided | 2026-05-27 | 2026-05-27 | |
| CVE-2026-45957 json | Not Provided | 2026-05-27 | 2026-05-27 | |
| CVE-2024-3447 json | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` ... | Not Provided | 2024-11-14 | 2026-05-12 |
| CVE-2023-42467 json | QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_... | 5.5 - MEDIUM | 2023-09-11 | 2023-11-04 |
| CVE-2023-40360 json | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether ... | 5.5 - MEDIUM | 2023-08-14 | 2023-09-15 |
| CVE-2023-6693 json | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether ... | 5.3 - MEDIUM | 2024-01-02 | 2024-03-08 |
| CVE-2023-5088 json | A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 in... | 7 - HIGH | 2023-11-03 | 2024-03-11 |
| CVE-2023-4135 json | A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an off... | 6.5 - MEDIUM | 2023-08-04 | 2023-11-07 |
| CVE-2023-3354 json | A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current n... | 7.5 - HIGH | 2023-07-11 | 2024-03-11 |
| CVE-2023-3301 json | A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared befo... | 5.6 - MEDIUM | 2023-09-13 | 2023-11-07 |
| CVE-2023-3255 json | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to ... | 6.5 - MEDIUM | 2023-09-13 | 2023-11-07 |
| CVE-2023-3180 json | A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle... | 6.5 - MEDIUM | 2023-08-03 | 2023-11-07 |
Known software with vulnerabilities from QEMU
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Qemu | Qemu | - |