High severity7.4NVD Advisory· Published Jun 19, 2026· Updated Jul 15, 2026
CVE-2026-3195
CVE-2026-3195
Description
A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtio_snd_pcm_in_cb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.
Affected products
9- osv-coords9 versionspkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/qemu-linux-user&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7
< 10.0.9-160000.1.1+ 8 more
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 8.2.10-150600.3.49.1
- (no CPE)range: < 8.2.10-150600.3.49.1
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 9.2.4-150700.3.20.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.