CVE-2020-7211: Libslirp Project Libslirp

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

Affected products

• Libslirp Project Libslirp: version 4.1.0 only
• Qemu Qemu: version 4.2.0 only

Published 2020-01-21. Last modified 2026-06-17.