CVE-2020-11869

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

• CWE-190

• http://www.openwall.com/lists/oss-security/2020/04/24/2Mailing List, Patch, Third Party Advisory
• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ac2071c3791b67fc7af78b8ceb320c01ca1b5df7
• https://usn.ubuntu.com/4372-1/
• http://www.openwall.com/lists/oss-security/2020/04/24/2Mailing List, Patch, Third Party Advisory
• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ac2071c3791b67fc7af78b8ceb320c01ca1b5df7
• https://usn.ubuntu.com/4372-1/

Published

Apr 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11863libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows…5.5
• CVE-2020-11864libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows…5.5
• CVE-2020-11865libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows…7.8
• CVE-2020-11866libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows…7.8
• CVE-2020-11867Audacity through 2.3.3 saves temporary files to /var/tmp/aud…3.3
• CVE-2020-11868ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows …7.5
• CVE-2020-1187An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11872The Cloud Functions subsystem in OpenTrace 1.0 might allow f…7.5
• CVE-2020-11873An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2020-11874An issue was discovered on LG mobile devices with Android OS…7.5
• CVE-2020-11875An issue was discovered on LG mobile devices with Android OS…7.8
• CVE-2020-11876airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-…7.5