CVE-2010-0297: Qemu

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.

Affected products

• Qemu Qemu: up to and including 0.11.0; version 0.1.0 only; version 0.1.1 only; version 0.1.2 only; version 0.1.3 only; version 0.1.4 only; …

Published 2010-02-12. Last modified 2026-06-16.