CVE-2021-45464: Kvmtool Project Kvmtool

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

kvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci.c. This allows a guest OS user to execute arbitrary code on the host machine.

Affected products

• Kvmtool Project Kvmtool: affected versions not specified

Published 2023-04-15. Last modified 2026-06-17.