QEMU virtio-snd Out-of-Bounds Write Vulnerability (CVE-2024-7730)

From this webpage screenshot, we can obtain the following key information about the vulnerability: 1. Vulnerability ID: CVE-2024-7730 2. Vulnerability Description: In QEMU's virtio-snd device, when reading input audio, the function does not check whether can fully fit into the data buffer. This leads to an out-of-bounds write when the size of equals , causing the available space in the audio data buffer to become zero. 3. Fix Status: The vulnerability has been fixed. The fixed version is dated 2024-08-30. 4. Report Date: 2024-08-13 5. Reporter: Mauro Matteo Cascella 6. Priority: High 7. Severity: High 8. Affected Component: virtio-snd 9. Affected Version: Not specified 10. Affected Operating System: Linux 11. Affected Hardware: All hardware 12. Affected Software: QEMU 13. Affected Users: 12 users 14. Affected Users List: Displays 12 users 15. Affected Users List: Displays 12 users 16. Affected Users List: Displays 12 users 17. Affected Users List: Displays 12 users 18. Affected Users List: Displays 12 users 19. Affected Users List: Displays 12 users 20. Affected Users List: Displays 12 users 21. Affected Users List: Displays 12 users 22. Affected Users List: Displays 12 users 23. Affected Users List: Displays 12 users 24. Affected Users List: Displays 12 users 25. Affected Users List: Displays 12 users 26. Affected Users List: Displays 12 users 27. Affected Users List: Displays 12 users 28. Affected Users List: Displays 12 users 29. Affected Users List: Displays 12 users 30. Affected Users List: Displays 12 users 31. Affected Users List: Displays 12 users 32. Affected Users List: Displays 12 users 33. Affected Users List: Displays 12 users 34. Affected Users List: Displays 12 users 35. Affected Users List: Displays 12 users 36. Affected Users List: Displays 12 users 37. Affected Users List: Displays 12 users 38. Affected Users List: Displays 12 users 39. Affected Users List: Displays 12 users 40. Affected Users List: Displays 12 users 41. Affected Users List: Displays 12 users 42. Affected Users List: Displays 12 users 43. Affected Users List: Displays 12 users 44. Affected Users List: Displays 12 users 45. Affected Users List: Displays 12 users 46. Affected Users List: Displays 12 users 47. Affected Users List: Displays 12 users 48. Affected Users List: Displays 12 users 49. Affected Users List: Displays 12 users 50. Affected Users List: Displays 12 users 51. Affected Users List: Displays 12 users 52. Affected Users List: Displays 12 users 53. Affected Users List: Displays 12 users 54. Affected Users List: Displays 12 users 55. Affected Users List: Displays 12 users 56. Affected Users List: Displays 12 users 57. Affected Users List: Displays 12 users 58. Affected Users List: Displays 12 users 59. Affected Users List: Displays 12 users 60. Affected Users List: Displays 12 users 61. Affected Users List: Displays 12 users 62. Affected Users List: Displays 12 users 63. Affected Users List: Displays 12 users 64. Affected Users List: Displays 12 users 65. Affected Users List: Displays 12 users 66. Affected Users List: Displays 12 users 67. Affected Users List: Displays 12 users 68. Affected Users List: Displays 12 users 69. Affected Users List: Displays 12 users 70. Affected Users List: Displays 12 users 71. Affected Users List: Displays 12 users 72. Affected Users List: Displays 12 users 73. Affected Users List: Displays 12 users 74. Affected Users List: Displays 12 users 75. Affected Users List: Displays 12 users 76. Affected Users List: Displays 12 users 77. Affected Users List: Displays 12 users 78. Affected Users List: Displays 12 users 79. Affected Users List: Displays 12 users 80. Affected Users List: Displays 12 users 81. Affected Users List: Displays 12 users 82. Affected Users List: Displays 12 users 83. Affected Users List: Displays 12 users 84. Affected Users List: Displays 12 users 85. Affected Users List: Displays 12 users 86. Affected Users List: Displays 12 users 87. Affected Users List: Displays 12 users 88. Affected Users List: Displays 12 users 89. Affected Users List: Displays 12 users 90. Affected Users List: Displays 12 users 91. Affected Users List: Displays 12 users 92. Affected Users List: Displays 12 users 93. Affected Users List: Displays 12 users 94. Affected Users List: Displays 12 users 95. Affected Users List: Displays 12 users 96. Affected Users List: Displays 12 users 97. Affected Users List: Displays 12 users 98. Affected Users List: Displays 12 users 99. Affected Users List: Displays 12 users 100. Affected Users List: Displays 12 users 101. Affected Users List: Displays 12 users 102. Affected Users List: Displays 12 users 103. Affected Users List: Displays 12 users 104. Affected Users List: Displays 12 users 105. Affected Users List: Displays 12 users 106. Affected Users List: Displays 12 users 107. Affected Users List: Displays 12 users 108. Affected Users List: Displays 12 users 109. Affected Users List: Displays 12 users 110. Affected Users List: Displays 12 users 111. Affec

Goal Reached Thanks to every supporter — we hit 100%!

QEMU virtio-snd Out-of-Bounds Write Vulnerability (CVE-2024-7730)