CVE-2020-14415

LOW

QEMU < 5.0.0 - Divide By Zero in oss_write

Title source: llm

oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.

Core 2

Core References

Patch, Third Party Advisory vendor-advisory x_refsource_ubuntu

Patch x_refsource_confirm

CVSS v3 3.3

EPSS 0.0005

EPSS Percentile 15.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-369

Status published

Products (4)

canonical/ubuntu_linux 16.04

canonical/ubuntu_linux 18.04

canonical/ubuntu_linux 20.04

qemu/qemu < 5.0.0

Published Aug 27, 2020

Tracked Since Feb 18, 2026