AZL-112172

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112172.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-112172
Upstream
  • CVE-2026-97631
Published
2026-10-22T17:17:02Z
Modified
2026-11-03T05:33:06Z
Summary
CVE-2026-97631 affecting package qemu 10.1.0-2
Details

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.

References

Affected packages

Azure Linux:3 / qemu

Package

Name
qemu
Purl
pkg:rpm/azure-linux/qemu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
10.1.0-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112172.json"