{"action":"Upgrade qemu to 8.0.0-r6 or later.","affected":[{"fixed":"8.0.0-r6","introduced":"7.2.0"}],"component":"qemu","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["8.0.0-r6"],"id":"tcs_01M6GWQD6DFM3R03K8EQKHTMWN","modified_at":"2026-11-03T06:32:42.210142240Z","published_at":"2023-03-06T23:15:11.457Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-0330","https://security.alpinelinux.org/vuln/CVE-2023-0330"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-0330#Alpine:v3.19/qemu","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-0330"}],"summary":"A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free."}