CVE-2026-0665
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Feb 18, 2026
CISA due date
—
The record
An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Leap 15.6 | qemu | 0 | 8.2.10-150600.3.46.1 |
| openSUSE:Leap 15.6 | qemu-linux-user | 0 | 8.2.10-150600.3.46.1 |
| openSUSE:Leap 16.0 | qemu | 0 | 10.0.8-160000.1.1 |
| openSUSE:Leap 16.0 | qemu-linux-user | 0 | 10.0.8-160000.1.1 |
| openSUSE:Tumbleweed | qemu | 0 | 10.2.0-2.1 |
Related vulnerabilities
- CVE-2025-14876 A flaw was found in the virtio-crypto device of QEMU. Also affects qemu
- CVE-2025-12464 A stack-based buffer overflow was found in the QEMU e1000 network device. Also affects qemu
- CVE-2024-8612 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. Also affects qemu
- CVE-2024-8354 A flaw was found in QEMU. Also affects qemu
- CVE-2024-4693 A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). Also affects qemu
- CVE-2026-3195 A flaw was found in QEMU. Also affects qemu
- CVE-2026-3196 An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO… Also affects qemu
- CVE-2026-2243 A flaw was found in QEMU. Also affects qemu