Æ强

**Name of the Vulnerable Software and Affected Versions** QEMU (affected versions not specified) **Description** The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and QEMU process crash, via a VGA command. This is due to a problem in the `vmsvga fifo run` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU (affected versions not specified) **Description** The issue allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read in the `vmsvga fifo read raw` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.