Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2020-13765
Description:rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
Test IDs: 1.3.6.1.4.1.25623.1.0.113730   1.3.6.1.4.1.25623.1.0.892288   1.3.6.1.4.1.25623.1.0.892262  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-13765
https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319
https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676
https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html
https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html
https://usn.ubuntu.com/4467-1/




© 1998-2025 E-Soft Inc. All rights reserved.