CVE-2014-5263

Source
https://cve.org/CVERecord?id=CVE-2014-5263
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-5263.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-5263
Downstream
Related
Withdrawn
2026-01-27T04:12:52.547395Z
Published
2014-08-26T14:55:06Z
Modified
2026-01-27T04:12:52.547395Z
Summary
[none]
Details

vmstatexhcievent in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATEENDOF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.

References

Affected packages