QEMU CVE-2024-3447 SDHCI Heap Buffer Overflow Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-3447 2. Vulnerability Description: Heap buffer overflow in SDHCI device emulation. 3. Trigger Condition: The vulnerability is triggered when both and are set to size 0x200. 4. Impact: A malicious user can exploit this vulnerability to crash the QEMU process on the host, leading to a denial-of-service. 5. Fix Status: Fixed. 6. Fixed Version: Not specified. 7. Report Date: April 9, 2024. 8. Reporter: Mauro Matteo Cascella. 9. Priority: Medium. 10. Severity: Medium. 11. Dependency: Depends on bug 2274124. 12. Whitelist: Not specified. 13. Affected Component: Not specified. 14. Affected Version: Not specified. 15. Affected Hardware: All hardware. 16. Affected Operating System: Linux. 17. Affected Priority: Medium. 18. Affected Severity: Medium. 19. Affected Whitelist: Not specified. 20. Affected Dependency: Depends on bug 2274124. 21. Affected Whitelist: Not specified. 22. Affected Version: Not specified. 23. Affected Hardware: All hardware. 24. Affected Operating System: Linux. 25. Affected Priority: Medium. 26. Affected Severity: Medium. 27. Affected Whitelist: Not specified. 28. Affected Dependency: Depends on bug 2274124. 29. Affected Whitelist: Not specified. 30. Affected Version: Not specified. 31. Affected Hardware: All hardware. 32. Affected Operating System: Linux. 33. Affected Priority: Medium. 34. Affected Severity: Medium. 35. Affected Whitelist: Not specified. 36. Affected Dependency: Depends on bug 2274124. 37. Affected Whitelist: Not specified. 38. Affected Version: Not specified. 39. Affected Hardware: All hardware. 40. Affected Operating System: Linux. 41. Affected Priority: Medium. 42. Affected Severity: Medium. 43. Affected Whitelist: Not specified. 44. Affected Dependency: Depends on bug 2274124. 45. Affected Whitelist: Not specified. 46. Affected Version: Not specified. 47. Affected Hardware: All hardware. 48. Affected Operating System: Linux. 49. Affected Priority: Medium. 50. Affected Severity: Medium. 51. Affected Whitelist: Not specified. 52. Affected Dependency: Depends on bug 2274124. 53. Affected Whitelist: Not specified. 54. Affected Version: Not specified. 55. Affected Hardware: All hardware. 56. Affected Operating System: Linux. 57. Affected Priority: Medium. 58. Affected Severity: Medium. 59. Affected Whitelist: Not specified. 60. Affected Dependency: Depends on bug 2274124. 61. Affected Whitelist: Not specified. 62. Affected Version: Not specified. 63. Affected Hardware: All hardware. 64. Affected Operating System: Linux. 65. Affected Priority: Medium. 66. Affected Severity: Medium. 67. Affected Whitelist: Not specified. 68. Affected Dependency: Depends on bug 2274124. 69. Affected Whitelist: Not specified. 70. Affected Version: Not specified. 71. Affected Hardware: All hardware. 72. Affected Operating System: Linux. 73. Affected Priority: Medium. 74. Affected Severity: Medium. 75. Affected Whitelist: Not specified. 76. Affected Dependency: Depends on bug 2274124. 77. Affected Whitelist: Not specified. 78. Affected Version: Not specified. 79. Affected Hardware: All hardware. 80. Affected Operating System: Linux. 81. Affected Priority: Medium. 82. Affected Severity: Medium. 83. Affected Whitelist: Not specified. 84. Affected Dependency: Depends on bug 2274124. 85. Affected Whitelist: Not specified. 86. Affected Version: Not specified. 87. Affected Hardware: All hardware. 88. Affected Operating System: Linux. 89. Affected Priority: Medium. 90. Affected Severity: Medium. 91. Affected Whitelist: Not specified. 92. Affected Dependency: Depends on bug 2274124. 93. Affected Whitelist: Not specified. 94. Affected Version: Not specified. 95. Affected Hardware: All hardware. 96. Affected Operating System: Linux. 97. Affected Priority: Medium. 98. Affected Severity: Medium. 99. Affected Whitelist: Not specified. 100. Affected Dependency: Depends on bug 2274124. 101. Affected Whitelist: Not specified. 102. Affected Version: Not specified. 103. Affected Hardware: All hardware. 104. Affected Operating System: Linux. 105. Affected Priority: Medium. 106. Affected Severity: Medium. 107. Affected Whitelist: Not specified. 108. Affected Dependency: Depends on bug 2274124. 109. Affected Whitelist: Not specified. 110. Affected Version: Not specified. 111. Affected Hardware: All hardware. 112. Affected Operating System: Linux. 113. Affected Priority: Medium. 114. Affected Severity: Medium. 115. Affected Whitelist: Not specified. 116. Affected Dependency: Depends on bug 2274124. 117. Affected Whitelist: Not specified. 118. Affected Version: Not specified. 119. Affected Hardware: All hardware. 120. Affected Operating System: Linux. 121. Affected Priority: Medium. 122. Affected Severity: Medium. 123. Affected Whitelist: Not specified. 124. Affected Dependency: Depends on bug 2274124. 125. Affected Whitelist: Not specified. 126. Affected Version: Not specified. 127. Affected

Goal Reached Thanks to every supporter — we hit 100%!

QEMU CVE-2024-3447 SDHCI Heap Buffer Overflow Vulnerability