Published: 03/03/2022 Updated: 23/02/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.5 | Impact Score: 4 | Exploitability Score: 2

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
fedoraproject fedora 36
fedoraproject fedora 37

Debian Bug report logs - #992726 qemu: CVE-2021-3638 Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 22 Aug 2021 18:45:02 UTC Severity: important Tags: security, upstream Found in version qemu/1: ...

Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service or the the execution of arbitrary code For the stable distribution (bullseye), these problems have been fixed in version 1:52+dfsg-11+deb11u1 We recommend that you upgrade your qemu packages For the detailed security status of qe ...

An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of ...

An out-of-bounds memory access security issue was found in the ATI VGA device emulation of QEMU This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-787 https://bugzilla.redhat.com/show_bug.cgi?id=1979858 https://ubuntu.com/security/CVE-2021-3638 https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html https://security.netapp.com/advisory/ntap-20220407-0003/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992726 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11 https://www.debian.org/security/2021/dsa-4980

CVE-2021-3638

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect