CVE-2020-17380 | BDVDB-2026-148335 Detail

Description#

A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-01-30Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.