{"action":"Upgrade qemu to 1:7.0+dfsg-1 or later.","affected":[{"fixed":"1:7.0+dfsg-1","introduced":"0"}],"component":"qemu","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:7.0+dfsg-1"],"id":"tcs_01M5NFV8WH3CFJHPE7AFQ9FBZD","modified_at":"2026-10-23T18:03:50.104822859Z","published_at":"2022-05-02T19:15:08.343Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-3750","https://security-tracker.debian.org/tracker/CVE-2021-3750"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-3750#Debian:13/qemu","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-3750"}],"summary":"A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted conte"}