VULNERABILITY INTELLIGENCE

CVE-2014-0223

CVSS score4.6 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2014-11-04
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.

Primary references