{"id":"CVE-2026-50080","kind":"vulnerability","aliases":["CVE-2026-50080"],"related":[],"title":"QVM: ACPI event handler buffer overflow lets a guest crash the hypervisor","description":"Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request.","summary":"A stack-based buffer overflow in the ACPI event handler of QVM lets a process inside a guest virtual machine send a crafted ACPI request. The result is a crash of the QVM.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"QVM","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","qvm","virtualization"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:12+00:00","first_seen_at":"2026-11-10T20:46:05+00:00","triaged_at":"2026-11-10T20:48:15+00:00","updated_at":"2026-11-10T20:48:15+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T20:48:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"QVM: ACPI event handler buffer overflow lets a guest crash the hypervisor","impact":"low","summary":"A stack-based buffer overflow in the ACPI event handler of QVM lets a process inside a guest virtual machine send a crafted ACPI request. The result is a crash of the QVM.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["qvm","virtualization"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker in a guest crashes the QVM hypervisor process","analyst_note":"Identify which product ships QVM and its affected versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-50080.","how_to_check":"unknown","plain_action":"","product_name":"QVM","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000647,"input_tokens":4519,"output_tokens":391,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-50080':15A,18A 'acpi':2A,31B,47B,64C,85C 'allow':71C 'attack':73C 'base':26B,59C 'buffer':5A,27B,60C 'could':70C 'craft':46B,84C 'crash':10A,53B,78C 'cve':13A,16A 'event':3A,32B,65C 'guest':9A,41B,76C 'handler':4A,33B,66C 'hypervisor':12A 'infrastructur':20B 'insid':39B 'let':7A,36B 'machin':43B 'overflow':6A,28B,61C 'process':38B 'qvm':1A,19A,21B,35B,56B,69C,80C 'request':48B,86C 'result':50B 'send':44B,82C 'stack':25B,58C 'stack-bas':24B,57C 'virtual':22B,42B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["qvm"],"ptokens":["qvm"],"labels":["infrastructure","low","qvm","vendor","virtualization"],"campaign_type":null,"search_a":"'-2026':14A,17A '-50080':15A,18A 'acpi':2A 'buffer':5A 'crash':10A 'cve':13A,16A 'event':3A 'guest':9A 'handler':4A 'hypervisor':12A 'let':7A 'overflow':6A 'qvm':1A,19A","search_b":"'acpi':31B,47B 'base':26B 'buffer':27B 'craft':46B 'crash':53B 'event':32B 'guest':41B 'handler':33B 'infrastructur':20B 'insid':39B 'let':36B 'machin':43B 'overflow':28B 'process':38B 'qvm':21B,35B,56B 'request':48B 'result':50B 'send':44B 'stack':25B 'stack-bas':24B 'virtual':22B,42B","search_c":"'acpi':64C,85C 'allow':71C 'attack':73C 'base':59C 'buffer':60C 'could':70C 'craft':84C 'crash':78C 'event':65C 'guest':76C 'handler':66C 'overflow':61C 'qvm':69C,80C 'request':86C 'send':82C 'stack':58C 'stack-bas':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss_by":"secure@blackberry.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-50080","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50080","severity":null,"published_at":"2026-11-10T20:19:12+00:00","modified_at":"2026-11-10T20:19:12+00:00","first_seen_at":"2026-11-10T20:46:05+00:00","fetched_at":"2026-11-10T20:46:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}