CVE-2019-12247: Qemu

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

Affected products

• Qemu Qemu: version 3.0.0 only

Published 2019-05-22. Last modified 2026-06-17.