CVE-2016-9922: The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics m...

Security readout for executives and security teams

CVE-2016-9922 is a QEMU crash issue in Cirrus VGA graphics handling. A privileged user inside a guest operating system could trigger a divide-by-zero condition that crashes the QEMU process, causing denial of service for that virtual machine. Exposure is most relevant to QEMU environments that present Cirrus VGA graphics to guests, especially where guest administrators are not fully trusted. The bundle does not provide exact affected version ranges. Treat as a targeted availability risk for affected virtualization hosts, not a broad remote compromise issue. Patch during normal security maintenance, faster for untrusted or multi-tenant guest environments. Mitigation focus: Apply QEMU security updates from your supported vendor or distribution.; Verify the upstream Cirrus VGA bits-per-pixel check is included.; Prioritize multi-tenant or untrusted-guest virtualization hosts..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.