CVE-2026-3195: Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)
A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.
Other sources
Qemu-kvm: virtio-snd: heap buffer overflow in virtiosndpcmincb (incomplete fix for cve-2024-7730)
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.1.0-8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.1.0-9
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3195?
CVE-2026-3195 has a high severity rating of 7.4.
What is the impact of CVE-2026-3195?
CVE-2026-3195 can lead to a heap buffer overflow, potentially causing a denial of service or arbitrary code execution.
How do I fix CVE-2026-3195?
To fix CVE-2026-3195, update your QEMU version to the latest version that includes the complete fix for this vulnerability.
What software is affected by CVE-2026-3195?
CVE-2026-3195 affects the QEMU software specifically in its virtio-snd device.
Is CVE-2026-3195 related to other vulnerabilities?
Yes, CVE-2026-3195 is related to CVE-2024-7730 as it represents an incomplete fix for that earlier vulnerability.