high8.8
CVE-2022-1050
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device.
Impact
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qemu | Qemu | before 2.20.1 |