PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2019-3812

CVE-2019-3812

qemu: Out-of-bounds read in hw/i2c/i2c-ddc.c allows for memory disclosure

Loading…

Severity

Moderate

Red Hat Product Security

4.4

CVSS 3.0

Review impact separately from score.

Published · February 18, 2019

Updated · November 22, 2025

Description

QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the QEMU process on the host.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 4.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer