description: The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
problem types: Integer Signedness Error
affected:
{
product: QEMU
vendor: n/a
versions:
status: affected, version: before 1.7.2
}