CVE-2020-27616

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-682

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2020/11/03/2Mailing List, Patch, Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05018.htmlMailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20201202-0002/Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/03/2Mailing List, Patch, Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05018.htmlMailing List, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20201202-0002/Third Party Advisory

Timeline

Published: Nov 6, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-276176.5eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via pa CVE-2020-276185.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364 CVE-2020-276199.8In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.CVE-2020-27624.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Ea CVE-2020-276206.1The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to w CVE-2020-276214.3The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. In CVE-2020-276225.3In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.CVE-2020-276237.5JetBrains IdeaVim before version 0.58 might have caused an information leak in limited circumstances.CVE-2020-276245.3JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.CVE-2020-276255.3In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.CVE-2020-276265.3JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.CVE-2020-276276.1JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection.