Lucene search

K
redhatcveRedhat.comRH:CVE-2016-10028
HistoryDec 23, 2016 - 4:47 a.m.

CVE-2016-10028

2016-12-2304:47:25
redhat.com
access.redhat.com
15

0.001 Low

EPSS

Percentile

26.7%

The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.