[Bug 1841136] CVE-2019-20808 QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS

Statement: This flaw did not affect the following versions of QEMU as they did not include support for ATI VGA emulation: * `qemu-kvm-ma` as shipped with Red Hat Enterprise Linux 7. * `qemu-kvm-rhev` as shipped with Red Hat Virtualization and Red Hat OpenStack. * `qemu-kvm` as shipped with Red Hat Enterprise Linux 6, 7 and 8.



Source link