CVE-2016-1922

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A null pointer dereference flaw exists in QEMU when built with the TPR optimization for 32-bit Windows guests support. The issue occurs during I/O port write operations via the hmp interface, where the current cpu remains null, leading to a null pointer dereference. This flaw can be exploited by a user or process to crash the QEMU instance, resulting in a denial of service issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.