VULNERABILITY INTELLIGENCE
CVE-2015-5261
CVSS score7.1 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2016-06-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer