CVE-2026-3195
High · 7.4CVSS
7.4
EPSS
0.2%
Published
Jun 19, 2026
CISA due date
—
The record
A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Leap 16.0 | qemu | 0 | 10.0.9-160000.1.1 |
| openSUSE:Leap 16.0 | qemu-linux-user | 0 | 10.0.9-160000.1.1 |
Related vulnerabilities
- CVE-2026-3196 An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO… Also affects qemu
- CVE-2026-2243 A flaw was found in QEMU. Also affects qemu
- CVE-2026-0665 An off-by-one error was found in QEMU's KVM Xen guest support. Also affects qemu
- CVE-2025-14876 A flaw was found in the virtio-crypto device of QEMU. Also affects qemu
- CVE-2025-12464 A stack-based buffer overflow was found in the QEMU e1000 network device. Also affects qemu
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122
- CVE-2026-112393 Pillow is a Python imaging library. CWE-122
- CVE-2026-112395 Pillow is a Python imaging library. CWE-122