CVE-2013-4535

The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.

• CWE-20

• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=36cf2a37132c7f01fa9adb5f95f5312b27742fd4
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.htmlThird Party Advisory
• http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0743.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0744.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1066401Issue Tracking, Third Party Advisory
• http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=36cf2a37132c7f01fa9adb5f95f5312b27742fd4
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.htmlThird Party Advisory
• http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0743.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0744.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1066401Issue Tracking, Third Party Advisory

Published

Feb 11, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4529Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 al…
• CVE-2013-4530Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allow…
• CVE-2013-4531Buffer overflow in target-arm/machine.c in QEMU before 1.7.2…
• CVE-2013-4532Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun wh…7.8
• CVE-2013-4533Buffer overflow in the pxa2xx_ssp_load function in hw/arm/px…
• CVE-2013-4534Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 al…
• CVE-2013-4536An user able to alter the savevm data (either on the disk or…7.8
• CVE-2013-4537The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU befor…
• CVE-2013-4538Multiple buffer overflows in the ssd0323_load function in hw…
• CVE-2013-4539Multiple buffer overflows in the tsc210x_load function in hw…
• CVE-2013-4540Buffer overflow in scoop_gpio_handler_update in QEMU before …
• CVE-2013-4541The usb_device_post_load function in hw/usb/bus.c in QEMU be…