CVE-2020-13765
Published
CVSS v3
5.6
MEDIUM
CVSS v2
6.8
MEDIUM
Affected
1
PROJECT
Description
rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
GitHub