The vmsvgafiforun function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4453.json"