CVE-2022-1050

2022-03-2900:00:00

CWE-416

redhat

www.cve.org

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

A flaw was found in the QEMU implementation of VMWare’s paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "QEMU",
    "versions": [
      {
        "version": "qemu 2.20.1",
        "status": "affected"
      }
    ]
  }
]