CVE-2017-5931: Qemu

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.

Affected products

• Qemu Qemu: up to and including 2.8.1.1

Published 2017-03-27. Last modified 2026-06-17.