CVE-2018-18849

MEDIUM · CVSS 5.5 EPSS 0.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-18849

Severity

MEDIUM

CVSS

5.5

EPSS

0.56%

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.