#heap-overflow

QEMU patches heap overflow in vhost-user-gpu backend

CVE-2026-15264 let a malicious guest overflow a host heap buffer via crafted 2D resource dimensions.

A unit mismatch between text and graphics mode left a panning buffer undersized after mode switches, tracked as CVE-2026-17516.

By sudo