PT-2025-44674 · Qemu+3 · Qemu+3
Published
2025-10-31
·
Updated
2026-05-06
·
CVE-2025-12464
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
QEMU (affected versions not specified)
Description
A stack-based buffer overflow exists in the QEMU e1000 network device. The issue is due to the device’s receive code still processing short frames in loopback mode, despite the padding code being moved. This can lead to a buffer overrun in the
e1000 receive iov() function through the loopback code path. A malicious guest user could exploit this to crash the QEMU process on the host, resulting in a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Qemu
Ubuntu