CVE-2010-0430: libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hyperviso...

Security readout for executives and security teams

This flaw lets a user inside a virtual machine tamper with memory used by the QEMU-KVM process through libspice. In plain terms, a guest user may be able to read or change data belonging to the hypervisor process, which is serious for virtualization isolation. Most likely exposure is legacy Red Hat Enterprise Virtualization Hypervisor deployments using QEMU-KVM/libspice before 5.5-2.2. The source bundle says possibly other products, but does not identify them, so broader exposure must be verified against vendor inventories. Prioritize remediation where old RHEV-H or QEMU-KVM hosts still run multi-tenant or untrusted guests. The business risk is loss of virtual machine isolation, but urgency depends on whether these legacy versions remain in production. Mitigation focus: Apply the relevant Red Hat advisory updates for affected RHEV-H deployments.; Confirm RHEV-H is version 5.5-2.2 or later where applicable.; Check vendor guidance for any non-Red Hat libspice/QEMU-KVM products..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.