qemu vulnerabilities
CVEs whose affected-version data names the qemu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-11234High· 7.5A flaw was found in QEMU
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel.…
▾ TwilightRed Hat · qemuEPSS 0.86%via NVD
CVE-2024-7409High· 7.5A flaw was found in the QEMU NBD Server
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
▾ TwilightRed Hat · qemuEPSS 1.0%via NVD