CVE-2022-1050: Qemu

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.

Affected products

• Qemu Qemu: before 2.20.1 (fixed in 2.20.1)

Published 2022-03-29. Last modified 2026-06-17.