CVE-2021-3507

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-119 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: May 6, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350705.5RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Ind CVE-2021-350715.5Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service i CVE-2021-350727.8Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Con CVE-2021-350737.5Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna CVE-2021-350747.8Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, S CVE-2021-350757.8Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, CVE-2021-350767.5Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Comput CVE-2021-350777.8Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Comp CVE-2021-350787.5Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapd CVE-2021-350795.5Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdra CVE-2021-35085.5A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file.CVE-2021-350805.5Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdr