VULNERABILITY INTELLIGENCE

CVE-2016-0749

CVSS score10 HIGH

EPSS probability8.49%

CISA KEVNot currently listed

Published2016-06-09

Last modified2026-06-17

Description

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.