{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"qemu","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NDRVKVAFSY7P09TY3KH3H6","modified_at":"2026-09-21T07:00:57.241549793Z","published_at":"2019-06-24T11:15:09.367Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-12928","https://security-tracker.debian.org/tracker/CVE-2019-12928"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-12928","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-12928"}],"summary":"The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosur"}