VULNERABILITY INTELLIGENCE
CVE-2010-0297
CVSS score7.2 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2010-02-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer