AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-4539

HIGH · CVSS 7.2 EPSS 0.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-12-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2008-4539
Severity
HIGH
CVSS
7.2
EPSS
0.54%
Linux Ubuntu Debian

Original NVD Description

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.