CVE-2025-12464

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A stack-based buffer overflow exists in the QEMU e1000 network device. The issue is due to the device’s receive code still processing short frames in loopback mode, despite the padding code being moved. This can lead to a buffer overrun in the e1000 receive iov() function through the loopback code path. A malicious guest user could exploit this to crash the QEMU process on the host, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.