CVE-2020-35504 - AskarLabs CVE Database

CVE-2020-35504

Vendor N/A

Product QEMU

Weakness CWE-476

Published May 28, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Key dates

02Disclosure timeline

May 28, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-35504 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/476.html

Related vulnerabilities

04Related CVE

CVE-2024-24775 BIG-IP TMM vulnerability CVE-2026-21300 Substance3D - Modeler | NULL Pointer Dereference (CWE-476) CVE-2021-29513 Type confusion during tensor casts lead to dereferencing null pointers CVE-2026-0968 Libssh: libssh: denial of service due to malformed sftp message CVE-2022-41972 Contiki-NG contains NULL Pointer Dereference in BLE L2CAP module