CVE-2026-3195

HighCVSS 7.4/10Last modified Sep 1, 2026

Description

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Jun 19, 2026
Last modified: Sep 1, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-319505.3LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat CVE-2026-319515.7LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) se CVE-2026-319528.1Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 throu CVE-2026-319535.4Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Sit CVE-2026-319547.3Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAu CVE-2026-319554.9Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated S CVE-2026-319564.3Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4 CVE-2026-3195710.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed witho CVE-2026-319587.5Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number o CVE-2026-319595.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forg CVE-2026-31965.5An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out CVE-2026-319605.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP respons