CVE-2014-0143

CVE-2014-0143 describes multiple integer overflow vulnerabilities in QEMU's block drivers, affecting QEMU and Red Hat Enterprise Linux. These flaws, found in functions like parallels_open, bochs_open, and qcow2_snapshot_load_tmp, can be triggered by local users providing crafted input, leading to denial of service through crashes, buffer overflows, memory corruption, and out-of-bounds memory access. With a CVSS v3 score of 7.0 (High), the vulnerability requires low privileges and high attack complexity, but can result in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.