CVE-2020-13765

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.

• CWE-787

• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319
• https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/07/msg00020.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200619-0006/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/03/6Mailing List, Third Party Advisory
• https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319
• https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/06/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/07/msg00020.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200619-0006/Third Party Advisory
• https://usn.ubuntu.com/4467-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/06/03/6Mailing List, Third Party Advisory

Published

Jun 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1376<p>An elevation of privilege vulnerability exists in the way…7.8
• CVE-2020-13760In Joomla! before 3.9.19, missing token checks in com_postin…8.8
• CVE-2020-13761In Joomla! before 3.9.19, lack of input validation in the he…6.1
• CVE-2020-13762In Joomla! before 3.9.19, incorrect input validation of the …6.1
• CVE-2020-13763In Joomla! before 3.9.19, the default settings of the global…7.5
• CVE-2020-13764common.php in the Gravity Forms plugin before 2.4.9 for Word…7.5
• CVE-2020-13767The Mitel MiCollab application before 9.1.332 for iOS could …5.9
• CVE-2020-13768In MiniShare before 1.4.2, there is a stack-based buffer ove…9.8
• CVE-2020-13769LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.…8.8
• CVE-2020-1377An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-13770Several services are accessing named pipes in Ivanti Endpoin…7.8
• CVE-2020-13771Various components in Ivanti Endpoint Manager through 2020.1…7.8