Logo
vulnerabilityCVE-2026-3196
Name
CVE-2026-3196
Source
NVD ( link)Debian ( link)
Description
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
qemu
Exploitable

Vulnerability Ratings#


5.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.2.0
Exploitable
buildroot
master
11.0.0
Not Affected
openwrt
master
10.1.3-r3
Exploitable
yocto
kirkstone
6.2.0
Not Affected
yocto
master
11.1.0
Not Affected
yocto
scarthgap
8.2.7
Exploitable