Skip to main content

Out-of-bounds Write

CVE-2020-13361

Low
3.9/10

Summary

In QEMU prior to 4.2.1 and 5.0.x prior to 5.0.1, 'es1370_transfer_audio' in 'hw/audio/es1370.c' does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an 'es1370_write()' operation.

  • HIGH
  • LOCAL
  • LOW
  • CHANGED
  • NONE
  • HIGH
  • NONE
  • LOW

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published