cvedb.io
CVE-2016-4002
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2016-04-26T14:59:04.567 · Last modified 2026-06-17T00:46:43.143

Summary

Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.

Affected products

qemu — qemu

Does this affect you?

Add your gear to cvedb and we'll alert you only when qemu ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.