[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6CNko2szSowrDJEmRDl9eKPP3JXky7k6K_Cp2KARV_Q":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":84,"topProductsByCves":85,"seoMetadata":87,"meta":96},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},26110,"qemu",1,417,0,214,"2024-11-14","q",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},131555,"Qemu is a technology vendor with 1 tracked product and 417 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,37,44,50,55,60,66,73,79],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2018-12617","qmp_guest_file_read in qga\u002Fcommands-posix.c and qga\u002Fcommands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.","2018-06-21",7.5,"v3.1","High",false,0.25054,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":36},"CVE-2019-12928","The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a non-issue since QEMU's -qmp interface is meant to be used by trusted users. If one is able to access this interface via a tcp socket open to the internet, then it is an insecure configuration issue","2019-06-24",9.8,"v3.0","Critical",0.23036,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":26,"isKev":27,"epssScore":43},"CVE-2015-3456","The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.","2015-05-13",7.7,"v2",0.15275,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":49},"CVE-2015-8556","Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.","2017-03-24",10,0.13369,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":54},"CVE-2017-15118","A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.","2018-07-27",0.11931,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":24,"cvssVersion":42,"severity":26,"isKev":27,"epssScore":59},"CVE-2015-3209","Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.","2015-06-15",0.09679,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":25,"severity":35,"isKev":27,"epssScore":65},"CVE-2015-7512","Buffer overflow in the pcnet_receive function in hw\u002Fnet\u002Fpcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.","2016-01-08",9,0.0773,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":42,"severity":71,"isKev":27,"epssScore":72},"CVE-2008-2382","The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.","2008-12-24",5,"Medium",0.06619,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":78},"CVE-2015-1779","The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.","2016-01-12",8.6,0.06571,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":33,"cvssVersion":25,"severity":35,"isKev":27,"epssScore":83},"CVE-2016-4002","Buffer overflow in the mipsnet_receive function in hw\u002Fnet\u002Fmipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.","2016-04-26",0.06336,[],[86],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Qemu - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Qemu covering 1 product with 417 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Qemu vulnerabilities, Qemu security, Qemu CVE, Qemu threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":92,"@type":93,"name":94,"description":89,"url":95},"https:\u002F\u002Fschema.org","Organization","Qemu","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fqemu",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":97,"apiVersion":98},"2026-10-16T23:19:33.209Z","3.0"]