QEMU sdhci Heap-buffer-overflow Vulnerability Fix Report

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Project and Target: - Project: qemu - Target: qemu-fuzz-i386-target-generic-fuzz-sdhci-v3 2. Vulnerability Type: - Type: Heap-buffer-overflow WRITE 1 3. Stack Trace: - Crash Address: 0x615000045b00 - Crash State: sdhci_write, memory_region_write_accessor, memory_region_dispatch_write 4. Sanitizer: - Address (ASAN) 5. Recommended Security Severity: - Medium 6. Regression Information: - Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_qemu&range=202203220608:202203230608 7. Reproducer Testcase: - Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=4551470646427648 8. Report Date: - Report Date: May 11, 2023 9. Status: - Status: Fixed (Verified) 10. Priority: - Priority: P2 11. Severity: - Severity: S2 12. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 13. Type: - Type: Vulnerability 14. Priority: - Priority: P2 15. Severity: - Severity: S2 16. Status: - Status: Fixed (Verified) 17. Report Date: - Report Date: May 11, 2023 18. Discovery Date: - Discovery Date: May 11, 2023 19. Target: - Target: qemu 20. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 21. Type: - Type: Vulnerability 22. Priority: - Priority: P2 23. Severity: - Severity: S2 24. Status: - Status: Fixed (Verified) 25. Report Date: - Report Date: May 11, 2023 26. Discovery Date: - Discovery Date: May 11, 2023 27. Target: - Target: qemu 28. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 29. Type: - Type: Vulnerability 30. Priority: - Priority: P2 31. Severity: - Severity: S2 32. Status: - Status: Fixed (Verified) 33. Report Date: - Report Date: May 11, 2023 34. Discovery Date: - Discovery Date: May 11, 2023 35. Target: - Target: qemu 36. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 37. Type: - Type: Vulnerability 38. Priority: - Priority: P2 39. Severity: - Severity: S2 40. Status: - Status: Fixed (Verified) 41. Report Date: - Report Date: May 11, 2023 42. Discovery Date: - Discovery Date: May 11, 2023 43. Target: - Target: qemu 44. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 45. Type: - Type: Vulnerability 46. Priority: - Priority: P2 47. Severity: - Severity: S2 48. Status: - Status: Fixed (Verified) 49. Report Date: - Report Date: May 11, 2023 50. Discovery Date: - Discovery Date: May 11, 2023 51. Target: - Target: qemu 52. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 53. Type: - Type: Vulnerability 54. Priority: - Priority: P2 55. Severity: - Severity: S2 56. Status: - Status: Fixed (Verified) 57. Report Date: - Report Date: May 11, 2023 58. Discovery Date: - Discovery Date: May 11, 2023 59. Target: - Target: qemu 60. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 61. Type: - Type: Vulnerability 62. Priority: - Priority: P2 63. Severity: - Severity: S2 64. Status: - Status: Fixed (Verified) 65. Report Date: - Report Date: May 11, 2023 66. Discovery Date: - Discovery Date: May 11, 2023 67. Target: - Target: qemu 68. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 69. Type: - Type: Vulnerability 70. Priority: - Priority: P2 71. Severity: - Severity: S2 72. Status: - Status: Fixed (Verified) 73. Report Date: - Report Date: May 11, 2023 74. Discovery Date: - Discovery Date: May 11, 2023 75. Target: - Target: qemu 76. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 77. Type: - Type: Vulnerability 78. Priority: - Priority: P2 79. Severity: - Severity: S2 80. Status: - Status: Fixed (Verified) 81. Report Date: - Report Date: May 11, 2023 82. Discovery Date: - Discovery Date: May 11, 2023 83. Target: - Target: qemu 84. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 85. Type: - Type: Vulnerability 86. Priority: - Priority: P2 87. Severity: - Severity: S2 88. Status: - Status: Fixed (Verified) 89. Report Date: - Report Date: May 11, 2023 90. Discovery Date: - Discovery Date: May 11, 2023 91. Target: - Target: qemu 92. Reporter: - Reporter: mo...@clusterfuzz-external.iam.gserviceaccount.com 93. Type: - Type: Vulnerability 94. Priority: - Priority: P2 95. Severity: - Severity: S2 96. Status: - Status: Fixed (Verified)

Goal Reached Thanks to every supporter — we hit 100%!

QEMU sdhci Heap-buffer-overflow Vulnerability Fix Report