The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5683