Is CVE-2025-12464 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-12464 being exploited in the wild.

How severe is CVE-2025-12464?

Medium severity, with a CVSS score of 6.2, published 31 October 2025.

Which products and versions are affected?

QEMU Project QEMU 8.1.0 to 10.1.2; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat OpenShift Container Platform 4.

Is there a fix for CVE-2025-12464?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-12464 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2025-12464?

Check whether you run Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 or Red Hat OpenShift Container Platform 4. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-12464: QEMU e1000 stack buffer overflow in loopback mode

CVE-2025-12464 · Severity: medium · CVSS 6.2 · Published 2025-10-31

A security vulnerability has been identified in QEMU, a widely used virtualization software that allows computers to run multiple operating systems simultaneously. A flaw in how the software handles specific network traffic could allow a user inside a virtual machine to crash the host system's virtualization process. This results in a denial of service, potentially disrupting business operations and causing downtime for all services running on that host.

Technologies: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4. Vendors: Red Hat.

Quick answers

Is CVE-2025-12464 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-12464 being exploited in the wild.
How severe is CVE-2025-12464?: Medium severity, with a CVSS score of 6.2, published 31 October 2025.
Which products and versions are affected?: QEMU Project QEMU 8.1.0 to 10.1.2; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat OpenShift Container Platform 4.
Is there a fix for CVE-2025-12464?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-12464 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2025-12464?: Check whether you run Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 or Red Hat OpenShift Container Platform 4. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in the QEMU e1000 network device emulation. The vulnerability is located in the e1000_receive_iov() function and is triggered when the device processes short network frames in loopback mode. While frame padding logic was moved to the network core, the e1000 receive path still accepts unpadded short frames in loopback scenarios, leading to an out-of-bounds write. A local attacker with access to a guest virtual machine can exploit this to cause a heap/stack corruption that crashes the QEMU process on the host. The issue affects QEMU versions 8.1.0 through 10.1.2 and has been addressed in version 10.1.3.

Affected products

QEMU Project QEMU 8.1.0 to 10.1.2
Red Hat Red Hat Enterprise Linux 9
Red Hat Red Hat Enterprise Linux 10
Red Hat Red Hat OpenShift Container Platform 4

Timeline

2025-10-31: disclosed
2025-10-31: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.