AZL-60907
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60907.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-60907
- Upstream
- Published
- 2024-11-14T12:15:18Z
- Modified
- 2026-04-01T05:19:54.031763Z
- Summary
- CVE-2024-7730 affecting package qemu for versions less than 8.2.0-16
- Details
-
A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtiosndpcmincb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtiosndpcm_status, which makes the available space for audio data zero.
- References