CVE-2020-11947: Qemu

Low severity, CVSS 3.8. EPSS: 0.5% chance of exploitation in the next 30 days.

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.

Affected products

• Qemu Qemu: version 4.1.0 only

Published 2020-12-31. Last modified 2026-06-17.