CVE-2026-2243

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

A flaw was found in QEMU where a specially crafted VMDK image could trigger an out-of-bounds read vulnerability. This may lead to a 12-byte leak of sensitive information or a denial of service (DoS) condition.

Risk Assessment

The risk includes potential leakage of sensitive data (12 bytes) and service disruption, which could affect the stability and security of virtualized environments.

Recommendation

It is recommended to immediately update QEMU to a patched version and avoid opening VMDK images from untrusted sources.

Original NVD description (English source)

A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).