CVE-2020-25085 PUBLISHED

QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.

EPSS 0.16% · 36.3th percentile

Risk Scores

EPSS Score
0.16%
36.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSqemu1.5.0+dfsg-3ubuntu6, 1.6.0+dfsg-2ubuntu2, 1.6.0+dfsg-2ubuntu3
Ubuntu:16.04:LTSqemu1:2.5+dfsg-5ubuntu10.40, 0, 1:2.3+dfsg-5ubuntu9
Ubuntu:20.04:LTSqemu1:4.0+dfsg-0ubuntu9, 1:4.0+dfsg-0ubuntu10, 1:4.2-1ubuntu2
Ubuntu:18.04:LTSqemu1:2.11+dfsg-1ubuntu7.19, 1:2.11+dfsg-1ubuntu7.20, 1:2.11+dfsg-1ubuntu7.21

Timeline

References

Open in Interactive Console →