qemu | Snyk

Direct Vulnerabilities

Known vulnerabilities in the qemu package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2026-3196	*
M CVE-2026-3842	*
M CVE-2026-3195	*
M Out-of-bounds Read	*
M CVE-2024-7730	<9.0.2+ds-4ubuntu8
M Out-of-bounds Read	<1:9.0.2+ds-4ubuntu2
M Improper Synchronization	<1:8.1.3+ds-1ubuntu1
M Allocation of Resources Without Limits or Throttling	<1:8.1.3+ds-1ubuntu1
L Missing Release of Resource after Effective Lifetime	<1:6.2+dfsg-2ubuntu8
L Missing Release of Resource after Effective Lifetime	<1:6.2+dfsg-2ubuntu8
M Buffer Overflow	<1:6.2+dfsg-2ubuntu8
M Buffer Overflow	<1:6.2+dfsg-2ubuntu8
L Allocation of Resources Without Limits or Throttling	<1:6.0+dfsg-2expubuntu1
L Use After Free	<1:6.0+dfsg-1~ubuntu3
M Out-of-Bounds	<1:6.0+dfsg-1~ubuntu3
L Out-of-Bounds	<1:6.2+dfsg-2ubuntu8
L Integer Overflow or Wraparound	<1:6.2+dfsg-2ubuntu5
M Use After Free	<1:5.2+dfsg-6ubuntu2
L Out-of-bounds Read	<1:5.2+dfsg-6ubuntu2
L NULL Pointer Dereference	<1:6.0+dfsg-1~ubuntu3
L Out-of-bounds Read	<1:6.0+dfsg-1~ubuntu3
L NULL Pointer Dereference	<1:6.0+dfsg-1~ubuntu3
L Use After Free	<1:5.2+dfsg-2ubuntu1
L Reachable Assertion	<1:5.2+dfsg-2ubuntu1
M Out-of-bounds Write	<1:5.2+dfsg-2ubuntu1
L Loop with Unreachable Exit Condition ('Infinite Loop')	<1:5.2+dfsg-2ubuntu1
M Out-of-bounds Write	<1:5.2+dfsg-2ubuntu1
M Reachable Assertion	<1:5.2+dfsg-2ubuntu1
L Out-of-bounds Read	<1:5.2+dfsg-2ubuntu1
M Out-of-bounds Write	<1:4.2-3ubuntu1
L NULL Pointer Dereference	<1:6.0+dfsg-1~ubuntu3
M Double Free	<1:9.0.2+ds-4ubuntu2
M CVE-2024-7409	<1:9.0.2+ds-4ubuntu2
M Out-of-bounds Write	<1:9.0.2+ds-4ubuntu2
M CVE-2024-3447	<1:9.0.2+ds-4ubuntu2
L NULL Pointer Dereference	*
L Out-of-bounds Write	<1:4.2-1ubuntu1
L Use After Free	<1:4.2-1ubuntu1
L Out-of-bounds Read	*
L Out-of-Bounds	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L NULL Pointer Dereference	<1:6.2+dfsg-2ubuntu5
L Resource Exhaustion	*
M Off-by-one Error	*
L Improper Preservation of Permissions	*
M Reachable Assertion	<1:10.1.0+ds-5ubuntu2.4
M Use After Free	<1:10.1.0+ds-5ubuntu2.4
M CVE-2026-0665	<1:10.1.0+ds-5ubuntu2.4
M CVE-2025-14876	<1:10.1.0+ds-5ubuntu2.4
M Information Exposure	*
M CVE-2024-6519	*
M Stack-based Buffer Overflow	<1:10.1.0+ds-5ubuntu2.4
M Improper Access Control	<1:2.5+dfsg-1ubuntu5
M Information Exposure	<1:2.11+dfsg-1ubuntu10

Vulnerability

Vulnerable Version

CVE-2026-3196