CyberRota
← Ana sayfaya dön

CVE-2026-3195

HIGH · CVSS 7.4 EPSS %0.13

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-19T17:16:22.687 · Çekilme zamanı: 2026-06-30T18:28:10.406769+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-3195
Severity
HIGH
CVSS
7.4
EPSS
%0.13

Orijinal NVD Açıklaması

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.