The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | V200R006C10 |