hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-11102.json"