CVE-2022-3872
Published: 07 November 2022
Summary
CVE-2022-3872 is a high-severity Off-by-one Error (CWE-193) vulnerability in Qemu Qemu. Its CVSS base score is 8.6 (High).
Operationally, ranked at the 24.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-43209
Vulnerability details
An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count == block_size. A malicious guest could use this flaw to crash the…
more
QEMU process on the host, resulting in a denial of service condition.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.