{"id":"CVE-2018-20815","details":"In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.","modified":"2026-08-18T13:07:48.370907Z","published":"2019-05-31T22:29:00.833Z","related":["SUSE-SU-2019:1238-1","SUSE-SU-2019:1239-1","SUSE-SU-2019:1268-1","SUSE-SU-2019:1269-1","SUSE-SU-2019:1272-1","SUSE-SU-2019:1348-1","SUSE-SU-2019:1349-1","SUSE-SU-2019:1371-1","SUSE-SU-2019:14052-1","SUSE-SU-2019:14053-1","SUSE-SU-2019:14063-1","SUSE-SU-2019:14201-1","openSUSE-SU-2019:1405-1","openSUSE-SU-2024:11287-1"],"references":[{"type":"WEB","url":"https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"},{"type":"WEB","url":"https://seclists.org/bugtraq/2019/Aug/41"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1667"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1723"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1743"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1881"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1968"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2507"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2553"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4506"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qemu/qemu","events":[{"introduced":"32a1a94dd324d33578dca1dc96d7896a0244d768"},{"last_affected":"32a1a94dd324d33578dca1dc96d7896a0244d768"}],"database_specific":{"cpe":"cpe:2.3:a:qemu:qemu:3.1.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.1.0"},{"last_affected":"3.1.0"}],"source":"CPE_STRING"}}],"versions":["3.1.0","v3.1.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20815.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.com/qemu-project/qemu","events":[{"introduced":"32a1a94dd324d33578dca1dc96d7896a0244d768"},{"last_affected":"32a1a94dd324d33578dca1dc96d7896a0244d768"}],"database_specific":{"cpe":"cpe:2.3:a:qemu:qemu:3.1.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.1.0"},{"last_affected":"3.1.0"}],"source":"CPE_STRING"}}],"versions":["3.1.0","v3.1.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20815.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}