Lucene search

K
osvGoogleOSV:CVE-2017-14167
HistorySep 08, 2017 - 6:29 p.m.

CVE-2017-14167

2017-09-0818:29:00
Google
osv.dev
4

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.