CVE-2018-18438
Description
From CVE.org
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
Statement
The maintainer audited the code and determined that no memory corruption is possible using this flaw. Patches were applied upstream to prevent future changes introducing such flaws, but the issues identified by this CVE were determined to not constitute a vulnerability.
Acknowledgements
Red Hat would like to thank Arash Tohidi for reporting this issue.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
