qemu vulnerabilities

CVEs per yearBy the year they were published

1. 20189
2. 20181
3. 20204
4. 20202
5. 20252

Newest CVEs

• CVE-2025-54567

  hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

  QEMU · QEMU

  Medium4.2
• CVE-2025-54566

  hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.

  QEMU · QEMU

  Medium4.2
• CVE-2015-6815

  The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which…

  QEMU · QEMU

  Low3.5
• CVE-2015-5239

  Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message,…

  QEMU · QEMU

  Medium6.5
• CVE-2015-5278

  The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or…

  QEMU · QEMU

  Medium6.5
• CVE-2015-5745

  Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU…

  QEMU · QEMU

  Medium6.5
• CVE-2013-4532

  Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the…

  qemu · qemu

  High7.8
• CVE-2013-2016

  A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio…

  qemu · qemu (virtio-rng)

  High7.8
• CVE-2017-15118

  A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up…

  QEMU · Qemu

  High8.3
• CVE-2016-9603

  A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client…

  QEMU · Qemu:

  Medium5.5