VULNERABILITY INTELLIGENCE

CVE-2014-5388

CVSS score4.6 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2014-11-15
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.

Weakness classification

  • CWE-193: Off-by-one Error

Primary references