CVE-2021-3638

An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

• CWE-787
• CWE-787

• https://bugzilla.redhat.com/show_bug.cgi?id=1979858Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/Mailing List, Third Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.htmlExploit, Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220407-0003/Third Party Advisory
• https://ubuntu.com/security/CVE-2021-3638Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1979858Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/Mailing List, Third Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.htmlExploit, Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220407-0003/Third Party Advisory
• https://ubuntu.com/security/CVE-2021-3638Third Party Advisory

Published

Mar 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36372In Apache Ozone versions prior to 1.2.0, Initially generated…9.8
• CVE-2021-36373When reading a specially crafted TAR archive an Apache Ant b…5.5
• CVE-2021-36374When reading a specially crafted ZIP archive, or a derived f…5.5
• CVE-2021-36376dandavison delta before 0.8.3 on Windows resolves an executa…7.8
• CVE-2021-36377Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips th…7.5
• CVE-2021-36379Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-36380Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS…9.8
• CVE-2021-36381In Edifecs Transaction Management through 2021-07-12, an una…5.3
• CVE-2021-36382Devolutions Server before 2021.1.18, and LTS before 2020.3.2…3.7
• CVE-2021-36383Xen Orchestra (with xo-web through 5.80.0 and xo-server thro…4.3
• CVE-2021-36385A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 al…9.8
• CVE-2021-36386report_vbuild in report.c in Fetchmail before 6.4.20 sometim…7.5