Known vulnerabilities in qemu (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:qemu_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 65
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu (Ubuntu package) qemu (Ubuntu package) is affected by 65 known vulnerabilities: 2 high, 32 medium, 31 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123559 - Off-by-one Error
CVE-2026-0665
CWE-193 Low
No
No
1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.13, 1:10.1.0+ds-5ubuntu2.4 05.03.2026 SB2026030513
SB2026030515
SB2026030526
and 2 more
#VU123558 - Allocation of Resources Without Limits or Throttling
CVE-2025-14876
CWE-770 Low
No
No
1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.13, 1:10.1.0+ds-5ubuntu2.4 05.03.2026 SB2026030513
SB2026030515
SB2026030529
and 7 more
#VU120621 - Stack-based buffer overflow
CVE-2025-12464
CWE-121 Low
No
No
1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.13, 1:10.1.0+ds-5ubuntu2.4 29.12.2025 SB2025122914
SB2025122929
SB2026010596
and 9 more
#VU116886 - Use After Free
CVE-2025-11234
CWE-416 Medium
No
No
1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.13, 1:10.1.0+ds-5ubuntu2.4 10.10.2025 SB2025101011
SB2025122929
SB2026010596
and 20 more
#VU99262 - Reachable Assertion
CVE-2024-8354
CWE-617 Low
No
No
1:6.2+dfsg-2ubuntu6.27, 1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.10, 1:8.2.2+ds-0ubuntu1.13, 1:9.2.1+ds-1ubuntu5.2, 1:10.1.0+ds-5ubuntu2.4 22.10.2024 SB20241022385
SB20241022393
SB2024110815
and 10 more
#VU96080 - Improper Synchronization
CVE-2024-7409
CWE-662 Medium
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 16.08.2024 SB2024081656
SB2024081658
SB2024081659
and 32 more
#VU94529 - Reachable Assertion
CVE-2024-3567
CWE-617 Medium
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 18.07.2024 SB2024071840
SB2025091151
SB20250919155
#VU94528 - Operation on a Resource after Expiration or Release
CVE-2024-4693
CWE-672 Medium
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 18.07.2024 SB2024071839
SB20241022393
SB2024111101
and 2 more
#VU94527 - Out-of-bounds read
CVE-2024-6505
CWE-125 Low
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 18.07.2024 SB2024071837
SB2024092765
SB2024092766
and 6 more
#VU94526 - Resource exhaustion
CVE-2024-4467
CWE-400 Low
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 18.07.2024 SB2024071836
SB2024071838
SB20240718189
and 12 more
#VU89048 - Heap-based Buffer Overflow
CVE-2024-3447
CWE-122 Low
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 29.04.2024 SB2024042937
SB2024042938
SB2024042945
and 9 more
#VU89047 - Double Free
CVE-2024-3446
CWE-415 Low
No
No
1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2 29.04.2024 SB2024042936
SB2024042938
SB2024042945
and 12 more
#VU85828 - Divide By Zero
CVE-2023-42467
CWE-369 Low
No
No
1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16 26.01.2024 SB2024012620
SB2024012627
SB2024043004
and 4 more
#VU85827 - Improper Synchronization
CVE-2023-5088
CWE-662 Low
No
No
1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16 26.01.2024 SB2024012618
SB2024012627
SB2024043004
and 5 more
#VU85734 - Use After Free
CVE-2023-3019
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 23.01.2024 SB2024012356
SB2024012360
SB2024013061
and 12 more
#VU54310 - Release of invalid pointer or reference
CVE-2021-3594
CWE-763 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 22.06.2021 SB2021062220
SB2021062221
SB2021072002
and 14 more
#VU54308 - Release of invalid pointer or reference
CVE-2021-3592
CWE-763 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 22.06.2021 SB2021062220
SB2021062221
SB2021072002
and 15 more
#VU31806 - Out-of-bounds write
CVE-2020-13765
CWE-787 Medium
No
No
Ubuntu Pro (Infra-only), 1:2.5+dfsg-5ubuntu10.45, 1:2.11+dfsg-1ubuntu7.31, 1:4.2-3ubuntu6.4, 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 24.07.2020 SB2020072412
SB2021020319
SB2021020411
and 5 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039
CWE-122 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25456 - Memory corruption
CVE-2020-8608
CWE-119 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more


Showing elements 1 - 20 out of 65