CVE-2013-4532

Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.

• CWE-119

• http://www.ubuntu.com/usn/USN-2342-1Third Party Advisory
• https://access.redhat.com/security/cve/cve-2013-4532Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532Issue Tracking, Third Party Advisory
• https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2Patch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4532Third Party Advisory
• http://www.ubuntu.com/usn/USN-2342-1Third Party Advisory
• https://access.redhat.com/security/cve/cve-2013-4532Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532Issue Tracking, Third Party Advisory
• https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2Patch, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4532Third Party Advisory

Published

Jan 2, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4526Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows…
• CVE-2013-4527Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 migh…
• CVE-2013-4528Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-4529Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 al…
• CVE-2013-4530Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allow…
• CVE-2013-4531Buffer overflow in target-arm/machine.c in QEMU before 1.7.2…
• CVE-2013-4533Buffer overflow in the pxa2xx_ssp_load function in hw/arm/px…
• CVE-2013-4534Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 al…
• CVE-2013-4535The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU …8.8
• CVE-2013-4536An user able to alter the savevm data (either on the disk or…7.8
• CVE-2013-4537The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU befor…
• CVE-2013-4538Multiple buffer overflows in the ssd0323_load function in hw…