CVE-2016-9911
Qemu: usb: ehci: memory leakage in ehci_init_transfer
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · November 8, 2016
Updated · November 2, 2026
Description
Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 3CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS 2.0 · 2.3AV:A/AC:M/Au:S/C:N/I:N/A:P
CWE-244 · Improper Clearing of Heap Memory Before Release