CVE-2016-9846

CVE-2016-9846 describes a memory leakage vulnerability in QEMU's Virtio GPU Device emulator, specifically within the update_cursor_data_virgl function. A malicious guest user or process could exploit this flaw to leak host memory bytes, leading to a Denial of Service (DoS) for the host system. With a CVSS score of 6.5 (MEDIUM), the vulnerability requires local access and has low attack complexity, but its primary impact is availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.