CVE-2014-0145: Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of...

Security readout for executives and security teams

CVE-2014-0145 is a QEMU disk-image parsing flaw. A local user who can make QEMU process a malformed QCOW2 or DMG image may crash the QEMU process and may be able to execute code. Business urgency is highest for virtualization platforms that import or run user-supplied images. Exposure is likely limited to legacy or unpatched QEMU deployments, especially systems that allow local users, tenants, automation, or image pipelines to provide QCOW2 or DMG files for QEMU to inspect or run. Treat this as a legacy virtualization hygiene issue with high impact in the wrong environment. It is most urgent where untrusted users can submit disk images; otherwise prioritize through normal patch assurance and exposure review. Mitigation focus: Upgrade QEMU beyond the affected versions or apply vendor security updates.; Prioritize hosts that process untrusted QCOW2 or DMG images.; Restrict who can upload, import, or attach disk images to QEMU..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.