CVE-2018-19665: Opensuse Leap

Medium severity, CVSS 5.7. EPSS: 0.9% chance of exploitation in the next 30 days.

The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.

Affected products

• Opensuse Leap: version 42.3 only
• Qemu Qemu: up to and including 3.0.1; version 3.1.0 only

Published 2018-12-06. Last modified 2026-06-17.