https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:56.964674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-452 certfr-2014-avi-452 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Qemu</span>. Elles permettent à un attaquant de… 2026-10-02T17:06:56.997347+00:00 certfr-2014-avi-452 https://cve.radiocsirt.org/vuln/euvd-2026-99271 EUVD-2026-99271 2026-10-02T17:06:56.997390+00:00 EUVD-2026-99271 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3461 fkie_cve-2014-3461 2026-10-02T17:06:56.997406+00:00

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

 https://cve.radiocsirt.org/vuln/ghsa-9mpf-qr4j-4fp9 GHSA-9mpf-qr4j-4fp9 2026-10-02T17:06:56.997434+00:00

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

 https://cve.radiocsirt.org/vuln/gsd-2014-3461 gsd-2014-3461 2026-10-02T17:06:56.997450+00:00 gsd-2014-3461 https://cve.radiocsirt.org/vuln/rhsa-2014:0674 RHSA-2014:0674 — Red Hat Security Advisory: rhev-hypervisor6 3.4.0 security, bug fix, and enhancement update 2026-10-02T17:06:56.997460+00:00

qemu: virtio-net: buffer overflow on invalid state load qemu: virtio: out-of-bounds buffer write on invalid state load qemu: virtio: insufficient validation of num_sg when mapping qemu: virtio: insufficient validation of num_sg when mapping qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load qemu: virtio-scsi: buffer overrun on invalid state load qemu: virtio: buffer overrun on incoming migration qemu: crash by possible division by zero Qemu: block: multiple integer overflow flaws Qemu: block: missing input validation Qemu: prevent possible buffer overflows Qemu: qcow2: NULL dereference in qcow2_open() error path Qemu: block: possible crash due signed types or logic error Qemu: vhdx: bounds checking for block_size and logical_sector_size qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function qemu: virtio: out-of-bounds buffer write on state load with invalid config_len QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART Qemu: usb: fix up post load checks

 https://cve.radiocsirt.org/vuln/rhsa-2014:0927 RHSA-2014:0927 — Red Hat Security Advisory: qemu-kvm security and bug fix update 2026-10-02T17:06:56.997503+00:00

qemu: virtio-net: buffer overflow on invalid state load qemu: virtio-net: out-of-bounds buffer write on load qemu: virtio-net: out-of-bounds buffer write on invalid state load qemu: virtio: out-of-bounds buffer write on invalid state load qemu: hpet: buffer overrun on invalid state load qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load qemu: virtio: insufficient validation of num_sg when mapping qemu: virtio: insufficient validation of num_sg when mapping qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load qemu: virtio-scsi: buffer overrun on invalid state load qemu: virtio: buffer overrun on incoming migration qemu: virtio: out-of-bounds buffer write on state load with invalid config_len Qemu: qcow1: validate L2 table size to avoid integer overflows Qemu: qcow1: validate image size to avoid out-of-bounds memory access Qemu: usb: fix up post load checks

 https://cve.radiocsirt.org/vuln/suse-su-2015:0870-1 SUSE-SU-2015:0870-1 — Security update for kvm 2026-10-02T17:06:56.997543+00:00

Security update for kvm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3461 UBUNTU-CVE-2014-3461 2026-10-02T17:06:56.997564+00:00

Affected: Ubuntu:14.04:LTS: qemu

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."