CVE-2021-3750

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=1999073Issue Tracking, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/541Exploit, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/556Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220624-0003/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1999073Issue Tracking, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/541Exploit, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/556Third Party Advisory
• https://security.gentoo.org/glsa/202208-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220624-0003/Third Party Advisory

Published

May 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3749axios is vulnerable to Inefficient Regular Expression Comple…7.5
• CVE-2021-37491An issue discovered in src/wallet/wallet.cpp in Dogecoin Pro…7.5
• CVE-2021-37492An issue discovered in src/wallet/wallet.cpp in Ravencoin Co…7.5
• CVE-2021-37497SQL injection vulnerability in route of PbootCMS 3.0.5 allow…9.8
• CVE-2021-37498An SSRF issue was discovered in Reprise License Manager (RLM…6.5
• CVE-2021-37499CRLF vulnerability in Reprise License Manager (RLM) web inte…6.5
• CVE-2021-37500Directory traversal vulnerability in Reprise License Manager…8.1
• CVE-2021-37501Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0…7.5
• CVE-2021-37502Cross Site Scripting (XSS) vulnerability in automad 1.7.5 al…5.4
• CVE-2021-37504A cross-site scripting (XSS) vulnerability in the fileNameSt…6.1
• CVE-2021-3751libmobi is vulnerable to Out-of-bounds Write9.8
• CVE-2021-37517An Access Control vulnerability exists in Dolibarr ERP/CRM 1…7.5