<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T13:47:45.839118+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2021-05152</id>
    <title>bdu:2021-05152</title>
    <updated>2026-10-03T13:47:46.008967+00:00</updated>
    <content>bdu:2021-05152</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2021-05152"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2020-25085</id>
    <title>Withdrawn: BELL-CVE-2020-25085 — CVE-2020-25085 does not affect BellSoft software</title>
    <updated>2026-10-03T13:47:46.009003+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2020-25085"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2020-54916</id>
    <title>cnvd-2020-54916</title>
    <updated>2026-10-03T13:47:46.009023+00:00</updated>
    <content>cnvd-2020-54916</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2020-54916"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-45416</id>
    <title>EUVD-2026-45416</title>
    <updated>2026-10-03T13:47:46.009037+00:00</updated>
    <content>EUVD-2026-45416</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-45416"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2020-25085</id>
    <title>fkie_cve-2020-25085</title>
    <updated>2026-10-03T13:47:46.009049+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2020-25085"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-hr23-r85w-j998</id>
    <title>GHSA-hr23-r85w-j998</title>
    <updated>2026-10-03T13:47:46.009076+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-hr23-r85w-j998"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2020-25085</id>
    <title>gsd-2020-25085</title>
    <updated>2026-10-03T13:47:46.009091+00:00</updated>
    <content>gsd-2020-25085</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2020-25085"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2021-1191</id>
    <title>OESA-2021-1191 — qemu security update</title>
    <updated>2026-10-03T13:47:46.009102+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: qemu</p>
<p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.



Security Fix(es):

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.(CVE-2021-3416)

The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.(CVE-2021-3409)

A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object &amp;apos;req&amp;apos; from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected.(CVE-2021-3392)

QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE…</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2021-1191"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2021:2591-1</id>
    <title>openSUSE-SU-2021:2591-1 — Security update for qemu</title>
    <updated>2026-10-03T13:47:46.009138+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for qemu</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2021:2591-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25085</id>
    <title>UBUNTU-CVE-2020-25085</title>
    <updated>2026-10-03T13:47:46.009160+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu</p>
<p>QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25085"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1269</id>
    <title>WID-SEC-W-2022-1269 — QEMU: Mehrere Schwachstellen ermöglichen Denial of Service</title>
    <updated>2026-10-03T13:47:46.009183+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1269"/>
  </entry>
</feed>
