ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qemu | Qemu | 4.2.0 (including) | 4.2.0 (including) |
| Qemu | Ubuntu | eoan | * |
| Qemu | Ubuntu | focal | * |
| Qemu | Ubuntu | trusty | * |