Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 |