https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:52:39.574950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-02391 cnvd-2016-02391 2026-10-02T19:52:39.749441+00:00 cnvd-2016-02391 https://cve.radiocsirt.org/vuln/euvd-2026-84014 EUVD-2026-84014 2026-10-02T19:52:39.749500+00:00 EUVD-2026-84014 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4020 fkie_cve-2016-4020 2026-10-02T19:52:39.749515+00:00

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

 https://cve.radiocsirt.org/vuln/ghsa-vcqr-cc8h-57gj GHSA-vcqr-cc8h-57gj 2026-10-02T19:52:39.749547+00:00

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

 https://cve.radiocsirt.org/vuln/gsd-2016-4020 gsd-2016-4020 2026-10-02T19:52:39.749563+00:00 gsd-2016-4020 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10233-1 openSUSE-SU-2024:10233-1 — qemu-2.6.1-1.5 on GA media 2026-10-02T19:52:39.749574+00:00

qemu-2.6.1-1.5 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2017:2392 RHSA-2017:2392 — Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update 2026-10-02T19:52:39.749619+00:00

Qemu: i386: leakage of stack memory to guest in kvmvapic.c Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation Qemu: net: vmxnet: integer overflow in packet initialisation Qemu: virtio: null pointer dereference in virtqueu_map_desc Qemu: usb: xhci memory leakage during device unplug Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch Qemu: char: divide by zero error in serial_update_parameters Qemu: audio: intel-hda: infinite loop in processing dma buffer stream Qemu: net: rtl8139: infinite loop while transmit in C+ mode Qemu: usb: redirector: memory leakage when destroying redirector Qemu: usb: ehci: memory leakage in ehci_init_transfer Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb Qemu: nbd: oob stack write in client routine drop_sync Qemu: serial: host memory leakage 16550A UART emulation Qemu: usb: integer overflow in emulated_apdu_from_guest Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx Qemu: net: infinite loop in e1000e NIC emulation Qemu: ide: ahci host memory leakage during hotunplug Qemu: usb: ehci host memory leakage during hotunplug Qemu: usb: xhci infinite recursive call via xhci_kick_ep

 https://cve.radiocsirt.org/vuln/suse-su-2016:1560-1 SUSE-SU-2016:1560-1 — Security update for qemu 2026-10-02T19:52:39.749670+00:00

Security update for qemu

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4020 UBUNTU-CVE-2016-4020 2026-10-02T19:52:39.749705+00:00

Affected: Ubuntu:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).