CVE-2022-3872

HIGH

QEMU < 7.1.0 - Off-by-one Read/Write in SDHCI Buffer Data Port Register

Title source: llm
STIX 2.1

Description

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count == block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

References (2)

Core 2

Scores

CVSS v3 8.6
EPSS 0.0080
EPSS Percentile 51.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-193
Status published
Products (2)
qemu/qemu 7.1.0 (6 CPE variants)
qemu/qemu < 7.1.0
Published Nov 07, 2022
Tracked Since Feb 18, 2026