ZDI-CAN-27578: ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

Published Jun 9, 2026

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of QEMU. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3886.

Affected Software

1 affected component

Qemu Qemu

Event History

Jun 9, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27578?

The severity of ZDI-CAN-27578 is rated as 8.8 on the CVSS scale, indicating a high level of risk.

How do I fix ZDI-CAN-27578?

To fix ZDI-CAN-27578, update QEMU to the latest version that addresses this vulnerability.

Who can exploit ZDI-CAN-27578?

Local attackers with low-privileged access to the target guest system can exploit ZDI-CAN-27578.

What type of vulnerability is ZDI-CAN-27578?

ZDI-CAN-27578 is an Integer Overflow vulnerability that can lead to Local Privilege Escalation.

What are the affected software versions for ZDI-CAN-27578?

QEMU installations that allow execution of low-privileged code are susceptible to ZDI-CAN-27578.