CVE-2020-11102: Qemu

Medium severity, CVSS 5.6. EPSS: 2% chance of exploitation in the next 30 days.

hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.

Affected products

• Qemu Qemu: version 4.2.0 only

Published 2020-04-06. Last modified 2026-06-17.