The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
{ "urgency": "not yet assigned" }