CVE-2021-3544

2021-06-0213:30:24

CWE-401

redhat

www.cve.org

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.

CNA Affected

[
  {
    "product": "QEMU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All QEMU versions up to and including 6.0"
      }
    ]
  }
]