CVE-2020-27821
QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 3, 2020
Updated · June 28, 2026
Description
A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service.
Statement
This flaw did not affect the versions of qemu-kvm as shipped with Red Hat Enterprise Linux 6 and 7, as they did not include support for the MemoryRegionCache structure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
CWE-787 · Out-of-bounds Write