Known vulnerabilities in qemu-system-riscv

Vendor: openEuler
Software: qemu-system-riscv
Software CPE: cpe:2.3:o:openeuler:qemu-system-riscv:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu-system-riscv qemu-system-riscv is affected by 32 known vulnerabilities: 2 high, 9 medium, 21 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123559 - Off-by-one Error
CVE-2026-0665		 CWE-193 Low
No
No
 8.2.0-67 05.03.2026 SB2026030513
SB2026030515
SB2026030526
and 2 more
#VU123558 - Allocation of Resources Without Limits or Throttling
CVE-2025-14876		 CWE-770 Low
No
No
 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73 05.03.2026 SB2026030513
SB2026030515
SB2026030529
and 7 more
#VU120621 - Stack-based buffer overflow
CVE-2025-12464		 CWE-121 Low
No
No
 6.2.0-112, 8.2.0-53, 8.2.0-54, 8.2.0-72 29.12.2025 SB2025122914
SB2025122929
SB2026010596
and 9 more
#VU116886 - Use After Free
CVE-2025-11234		 CWE-416 Medium
No
No
 6.2.0-112, 8.2.0-53, 8.2.0-54, 8.2.0-72 10.10.2025 SB2025101011
SB2025122929
SB2026010596
and 20 more
#VU99262 - Reachable Assertion
CVE-2024-8354		 CWE-617 Low
No
No
 6.2.0-110, 8.2.0-49 22.10.2024 SB20241022385
SB20241022393
SB2024110815
and 10 more
#VU98831 - Missing release of memory after effective lifetime
CVE-2024-8612		 CWE-401 Low
No
No
 6.2.0-100 21.10.2024 SB2024102106
SB2024102117
SB20241022393
and 4 more
#VU96080 - Improper Synchronization
CVE-2024-7409		 CWE-662 Medium
No
No
 6.2.0-97, 8.2.0-16 16.08.2024 SB2024081656
SB2024081658
SB2024081659
and 32 more
#VU95530 - NULL Pointer Dereference
CVE-2022-36648		 CWE-476 Low
No
No
 6.2.0-115, 8.2.0-57, 8.2.0-81 08.08.2024 SB2023082251
SB2026071923
SB2026072532
and 2 more
#VU94527 - Out-of-bounds read
CVE-2024-6505		 CWE-125 Low
No
No
 6.2.0-99, 8.2.0-18 18.07.2024 SB2024071837
SB2024092765
SB2024092766
and 6 more
#VU89048 - Heap-based Buffer Overflow
CVE-2024-3447		 CWE-122 Low
No
No
 6.2.0-88, 6.2.0-91 29.04.2024 SB2024042937
SB2024042938
SB2024042945
and 9 more
#VU89047 - Double Free
CVE-2024-3446		 CWE-415 Low
No
No
 6.2.0-88, 6.2.0-91 29.04.2024 SB2024042936
SB2024042938
SB2024042945
and 12 more
#VU88538 - Integer underflow
CVE-2024-24474		 CWE-191 Low
No
No
 6.2.0-88, 6.2.0-90 15.04.2024 SB2024041550
SB2024041552
SB2024041553
and 4 more
#VU87738 - NULL Pointer Dereference
CVE-2023-6683		 CWE-476 Medium
No
No
 6.2.0-86, 6.2.0-89 22.03.2024 SB2024032248
SB2024032249
SB2024032250
and 10 more
#VU87161 - Stack-based buffer overflow
CVE-2023-6693		 CWE-121 Low
No
No
 6.2.0-86, 6.2.0-89 06.03.2024 SB2024030635
SB2024030637
SB2024032249
and 9 more
#VU85831 - Out-of-bounds read
CVE-2023-1544		 CWE-125 Low
No
No
 6.2.0-83, 6.2.0-86 26.01.2024 SB2024012622
SB2024012627
SB2023120193
and 10 more
#VU85734 - Use After Free
CVE-2023-3019		 CWE-416 Low
No
No
 6.2.0-86, 6.2.0-89 23.01.2024 SB2024012356
SB2024012360
SB2024013061
and 12 more
#VU80015 - NULL Pointer Dereference
CVE-2023-3354		 CWE-476 Medium
No
No
 6.2.0-77 25.08.2023 SB2023082524
SB2023082526
SB2023082840
and 19 more
#VU78948 - Reachable Assertion
CVE-2023-3301		 CWE-617 Medium
No
No
 6.2.0-74, 6.2.0-78 04.08.2023 SB2023080421
SB2023080425
SB20230808136
and 11 more
#VU78946 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-3255		 CWE-835 Medium
No
No
 6.2.0-80, 6.2.0-83 04.08.2023 SB2023080416
SB2023080425
SB20230808136
and 13 more
#VU77499 - Out-of-bounds write
CVE-2023-0330		 CWE-787 Low
No
No
 6.2.0-88, 6.2.0-91 19.06.2023 SB2023061903
SB2023061909
SB2023063036
and 14 more


Showing elements 1 - 20 out of 32