CVE-2021-4206 log
Source |
|
Severity | High |
Remote | No |
Type | Arbitrary code execution |
Description | An integer overflow in the cursor_alloc() function of the QXL display device emulation can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. |
References |
---|
https://gitlab.com/qemu-project/qemu/-/commit/fa892e9a https://starlabs.sg/advisories/21-4206 |