CVE-2018-18438

Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · October 11, 2018

Updated · June 27, 2026

Description

Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.

Statement

The maintainer audited the code and determined that no memory corruption is possible using this flaw. Patches were applied upstream to prevent future changes introducing such flaws, but the issues identified by this CVE were determined to not constitute a vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound