CVE-2017-16845

Critical

Published: 17/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The hw/input/ps2.c file in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

Risk Assessment

The lack of validation for these values may allow an attacker to execute malicious code or cause system crashes, posing a serious threat to the stability and security of the virtual environment.

Recommendation

It is recommended to update Qemu to the latest version that includes fixes for validating 'rptr' and 'count' values during guest migration.

Original NVD description (English source)

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.