CVE-2025-54567

MEDIUM

QEMU <10.0.3 - Buffer Overflow

Title source: llm

Description

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

References (1)

Scores

CVSS v3 4.2
EPSS 0.0001
EPSS Percentile 0.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Classification

CWE
CWE-684
Status published

Affected Products (1)

qemu/qemu < 10.0.3

Timeline

Published Jul 25, 2025
Tracked Since Feb 18, 2026