CVE-2021-3947 | BDVDB-2026-170254 Detail

Description#

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-02-18Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.