A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2023-08-04T13:19:15.760Z
Updated: 2024-08-02T07:17:11.930Z
Reserved: 2023-08-03T09:52:00.316Z
Link: CVE-2023-4135
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-08-04T14:15:12.173
Modified: 2024-11-21T08:34:27.810
Link: CVE-2023-4135
Redhat