Known vulnerabilities in qemu-user-static

Vendor: openEuler
Software: qemu-user-static
Software CPE: cpe:2.3:o:openeuler:qemu-user-static:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu-user-static qemu-user-static is affected by 5 known vulnerabilities: 1 medium, 4 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123559 - Off-by-one Error
CVE-2026-0665		 CWE-193 Low
No
No
 8.2.0-67 05.03.2026 SB2026030513
SB2026030515
SB2026030526
and 2 more
#VU123558 - Allocation of Resources Without Limits or Throttling
CVE-2025-14876		 CWE-770 Low
No
No
 8.2.0-55, 8.2.0-56, 8.2.0-73 05.03.2026 SB2026030513
SB2026030515
SB2026030529
and 7 more
#VU120621 - Stack-based buffer overflow
CVE-2025-12464		 CWE-121 Low
No
No
 8.2.0-53, 8.2.0-54, 8.2.0-72 29.12.2025 SB2025122914
SB2025122929
SB2026010596
and 9 more
#VU116886 - Use After Free
CVE-2025-11234		 CWE-416 Medium
No
No
 8.2.0-53, 8.2.0-54, 8.2.0-72 10.10.2025 SB2025101011
SB2025122929
SB2026010596
and 20 more
#VU95530 - NULL Pointer Dereference
CVE-2022-36648		 CWE-476 Low
No
No
 8.2.0-57, 8.2.0-81 08.08.2024 SB2023082251
SB2026071923
SB2026072532
and 2 more