Description
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:2.5+dfsg-1 | — |
| Debian 13 | qemu | 1:2.5+dfsg-1 | — |
| Debian 12 | qemu | 1:2.5+dfsg-1 | — |
| Debian 8 | qemu | 1:2.1+dfsg-12+deb8u7 | DLA-1497-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.22 | USN-2891-1 |
Advisories 2
- USN-2891-1 qemu, qemu-kvm vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- DLA-1497-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- [oss-security] 20151224 CVE request Qemu: acpi: heap based buffer overrun during VM migration mailing-list
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1283722
- http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d9a3b33d2c9f996537b7f1d0246dee2d0120cefb
- 79670 vdb-entry
- GLSA-201602-01 vendor-advisory