Security Advisory

CVE-2020-11869

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-27 19:00:34
Last updated 2024-08-04 11:42:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.