VULNERABILITY INTELLIGENCE

CVE-2016-9103

CVSS score6 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2016-12-09

Last modified2026-06-17

Description

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.