CVE-2026-2243 – Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

CVE ID : CVE-2026-2243

Published : Feb. 19, 2026, 6:25 p.m. | 35 minutes ago

Description : A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…