CVE-2013-4533 Memory corruption in n/a

High 7.5 Published 4 Nov 2014 Updated 6 Aug 2024

Remote attackers can cause denial of service or execute arbitrary code via a crafted savevm image in QEMU.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2013-4533?

CVE-2013-4533 is a high-severity memory corruption vulnerability in Qemu Qemu, published on 4 Nov 2014. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image.

Weakness: CWE-119

Which versions are affected by CVE-2013-4533?

It affects 1 product.

Products include Qemu Qemu.

How do I fix CVE-2013-4533?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2013-4533 being exploited?

There is no known exploitation of CVE-2013-4533 in the wild and no public exploit code.

All Qemu Qemu vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-4533, GHSA-gv9w-w94v-hh44, UBUNTU-CVE-2013-4533.