← CVE Intelligence

CVE-2026-2243

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing PUBLISHED

Description (CNA)

A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 through 10.2.1
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.