description: An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
problem types: CWE-120, CWE-190
affected:
{
vendor: n/a
product: QEMU (ACPI ERST)
versions:
version: Affected: 7.0.0, Fixed: 7.2.0-rc0, status: affected
}