CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write

Back Api.Msrc.Microsoft

CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting Qemu's virtio-net Component Two vulnerabilities have been reported in Qemu's virtio-net component. CVE-2023-6693 involves a stack buffer overflow in the virtio_net_flush_tx() function, while CVE-2024-6505 addresses a queue index issue. Both vulnerabilities could potentially impact systems utilizing Qemu virtualization technology. 4 sources 41

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Tools (1)