The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted…

Description

The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.

Scores

EPSS (exploitation in 30 days)

0.96% · top 38% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

• Integer Signedness Error
• CWE-20 (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• QEMU

  • affected before 1.7.2

References (6)

• http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html (opens in a new tab)x_refsource_MISCx_transferred
• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=36cf2a37132c7f01fa9adb5f95f5312b27742fd4 (opens in a new tab)x_refsource_MISCx_transferred
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html (opens in a new tab)x_refsource_MISCx_transferred
• http://rhn.redhat.com/errata/RHSA-2014-0743.html (opens in a new tab)x_refsource_MISCx_transferred
• http://rhn.redhat.com/errata/RHSA-2014-0744.html (opens in a new tab)x_refsource_MISCx_transferred
• https://bugzilla.redhat.com/show_bug.cgi?id=1066401 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2013-4535](https://trackcve.app/badge/CVE-2013-4535.svg)](https://trackcve.app/cve/CVE-2013-4535)

Record last updated 6 Aug 2024, 16:45 UTC.