CVE-2013-4540

CVE-2013-4540 describes a buffer overflow vulnerability in QEMU versions prior to 1.7.2, specifically within the scoop_gpio_handler_update function, which could allow remote attackers to execute arbitrary code. This flaw is triggered by excessively large values in prev_level, gpio_level, or gpio_dir within a savevm image, impacting products like openSUSE and QEMU itself. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability compromise. Despite its severity, there is no evidence of active exploitation, no publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has received negligible community discussion or media coverage.