spice-vdagent vulnerabilities
CVEs whose affected-version data names the spice-vdagent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-57965Medium· 5.1Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to c…
▾ SunlitRed Hat · spice-vdagentEPSS 0.11%via CVEORG
CVE-2026-57966Medium· 4.4Spice-vdagent: path traversal in file transfer via unsanitized filename
A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SP…
▾ SunlitRed Hat · spice-vdagentEPSS 0.13%via CVEORG