Unrated severityNVD Advisory· Published Jun 30, 2026
Debian spice-vdagent: A flaw was found in spice-vdagent. A malicious or compromised SPICE host can tri…
CVE-2026-57965
Description
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.
Affected products
2Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.