Lucene search

K
osvGoogleOSV:CVE-2020-13765
HistoryJun 04, 2020 - 4:15 p.m.

CVE-2020-13765

2020-06-0416:15:12
Google
osv.dev
12

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.