PT-2026-51663 · Freedesktop.Org · Libslirp

Bruce Chen + 1 · Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-9539

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP NET RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti urp).

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-9539

Produtos afetados

Libslirp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-9539 · Nota de Segurança
• https://gitlab.freedesktop.org/slirp/libslirp/-/work_items/93 · Nota
• https://gitlab.freedesktop.org/slirp/libslirp/-/commit/927bca7344e31fd58e2f7afaca784aad4400eb84 · Correção
• https://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.9.2 · Nota