VULNERABILITY INTELLIGENCE

CVE-2016-7907

CVSS score4.4 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2016-10-05

Last modified2026-06-17

Description

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer des... .