Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2024-3447

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

qemu

Default version status: unaffected

  • 1.5.0 to < 9.0.0affected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

References