Description
Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.
References (6)
Scores
EPSS
0.0011
EPSS Percentile
29.2%
Details
CWE
CWE-193
Status
published
Products (5)
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
14.10
qemu/qemu
< 2.1.3
Published
Nov 15, 2014
Tracked Since
Feb 18, 2026