Vulnerability · Published Feb 19, 2026 · Assigned by redhat
CVE-2026-2243Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing
Medium 5.1
In plain English
A medium-severity out-of-bounds read in qemu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.1Medium
Exploit odds (30 days)0.1%top 97.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | qemu | no fix listed | DEBIAN-CVE-2026-2243 |
| Debian:13 | qemu | 1:10.0.10+ds-0+deb13u1 | DEBIAN-CVE-2026-2243 |
| Debian:14 | qemu | 1:10.2.2+ds-1 | DEBIAN-CVE-2026-2243 |
| Ubuntu:22.04:LTS | qemu | 1:6.2+dfsg-2ubuntu6.30 | UBUNTU-CVE-2026-2243 |
| Ubuntu:24.04:LTS | qemu | 1:8.2.2+ds-0ubuntu1.16 | UBUNTU-CVE-2026-2243 |
| Ubuntu:25.10 | qemu | 1:10.1.0+ds-5ubuntu2.6 | UBUNTU-CVE-2026-2243 |
| Ubuntu:26.04:LTS | qemu | no fix listed | UBUNTU-CVE-2026-2243 |
| Ubuntu:26.10 | qemu | no fix listed | UBUNTU-CVE-2026-2243 |
| Ubuntu:26.04:LTS | qemu-hwe | no fix listed | UBUNTU-CVE-2026-2243 |
| Ubuntu:26.10 | qemu-hwe | no fix listed | UBUNTU-CVE-2026-2243 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| qemu | 0 – through 10.2.1 | |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
References
- https://access.redhat.com/security/cve/CVE-2026-2243 vdb-entry, x_refsource_REDHAT
- RHBZ#2440934 issue-tracking, x_refsource_REDHAT