VULNERABILITY INTELLIGENCE
CVE-2014-2894
CVSS score7.2 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2014-04-23
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.