01Findingsseven assigned CVEs, by impact
A bounds check in the VGA renderer compares text-mode characters against graphics-mode pixels, so the resize is skipped — 960 bytes of guest-controlled palette past a 96-byte heap buffer, on every refresh, on a default machine.
Read the patchThe text and graphics renderers share one geometry cache in different units. Switching modes can leave the resize check comparing equal values, and the glyph loop paints past the surface. Our follow-up patch is merged upstream.
Patch series Commit 418396beA freed object stays reachable from guest-controlled state — the front half of a guest-to-host escape on multi-tenant cloud infrastructure.
Commit 5a8da7eUninitialised stack memory leaks through the PROXY-protocol parser with no authentication required — an ASLR defeat against internet-facing mail servers. Exim runs roughly half of them.
Read the advisoryReserving a bulk-in slot resets the length but not the read cursor. The subtraction underflows, and host heap memory — live pointers included — lands in guest RAM at a guest-chosen address. No crash, no noise.
Read the patchSharing a snippet created a public link that carried the entire conversation history, not the excerpt.
NVD recordA missing access check in com_modules let unprivileged users enumerate the site's module list from the frontend.
Four of the seven are in QEMU — the device-emulation layer underneath every multi-tenant cloud.
02Upstream fixesmerged
Pre-1.3 TLS server handshakes set ConnectionState.LocalCertificate on resumed connections, reporting a certificate chain that was never presented to the peer. The fix moves population to where the Certificate message is actually written.
Missing bounds checks in the LiteRT tensor builder let a crafted model drive a heap out-of-bounds write.
PR #10464CONCATENATE never checked that inputs matched on non-axis dimensions, so a sibling with a larger trailing product overran the output buffer — attacker-controlled length and content, reachable from an untrusted model through the default float delegate.