CVE-2022-4144

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition.

• CWE-125

• https://bugzilla.redhat.com/show_bug.cgi?id=2148506Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
• https://lists.nongnu.org/archive/html/qemu-devel/2022-11/msg04143.htmlMailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230127-0012/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2148506Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
• https://lists.nongnu.org/archive/html/qemu-devel/2022-11/msg04143.htmlMailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230127-0012/Third Party Advisory

Published

Nov 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41433EyesOfNetwork Web Interface v5.3 was discovered to contain a…4.8
• CVE-2022-41434EyesOfNetwork Web Interface v5.3 was discovered to contain a…6.1
• CVE-2022-41435OpenWRT LuCI version git-22.140.66206-02913be was discovered…5.4
• CVE-2022-41436An issue in OXHOO TP50 OXH1.50 allows unauthenticated attack…9.1
• CVE-2022-41437Billing System Project v1.0 was discovered to contain a remo…7.2
• CVE-2022-41439Billing System Project v1.0 was discovered to contain a SQL …7.2
• CVE-2022-41440Billing System Project v1.0 was discovered to contain a SQL …7.2
• CVE-2022-41441Multiple cross-site scripting (XSS) vulnerabilities in ReQlo…6.1
• CVE-2022-41442PicUploader v2.6.3 was discovered to contain cross-site scri…6.1
• CVE-2022-41443phpipam v1.5.0 was discovered to contain a header injection …9.8
• CVE-2022-41444Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via…6.1
• CVE-2022-41445A cross-site scripting (XSS) vulnerability in Record Managem…4.8