CVE-2019-3813

HIGH · CVSS 7.5 EPSS 1.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-02-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-3813

Severity

HIGH

CVSS

7.5

EPSS

1.21%

Original NVD Description

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.