Lucene search

K
osvGoogleOSV:CVE-2016-10028
HistoryFeb 27, 2017 - 10:59 p.m.

CVE-2016-10028

2017-02-2722:59:00
Google
osv.dev
6

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%