CVE-2020-10702

A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.

• CWE-325

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10702Issue Tracking, Third Party Advisory
• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=de0b1bae6461f67243282555475f88b2384a1eb9
• https://security.netapp.com/advisory/ntap-20200724-0007/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10702Issue Tracking, Third Party Advisory
• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=de0b1bae6461f67243282555475f88b2384a1eb9
• https://security.netapp.com/advisory/ntap-20200724-0007/Third Party Advisory

Published

Jun 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10697A flaw was found in Ansible Tower when running Openshift. To…4.4
• CVE-2020-10698A flaw was found in Ansible Tower when running jobs. This fl…3.3
• CVE-2020-10699A flaw was found in Linux, in targetcli-fb versions 2.1.50 a…7.8
• CVE-2020-1070An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-10700A use-after-free flaw was found in the way samba AD DC LDAP …5.3
• CVE-2020-10701A missing authorization flaw was found in the libvirt API re…6.5
• CVE-2020-10703A NULL pointer dereference was found in the libvirt API resp…6.5
• CVE-2020-10704A flaw was found when using samba as an Active Directory Dom…7.5
• CVE-2020-10705A flaw was discovered in Undertow in versions before Underto…7.5
• CVE-2020-10706A flaw was found in OpenShift Container Platform where OAuth…6.6
• CVE-2020-10707Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…