Red Hat spice-vdagent integer overflow

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Red Hat spice-vdagent. This affects an unknown function. Performing a manipulation results in integer overflow. This vulnerability was named CVE-2026-57965. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability was found in Red Hat spice-vdagent (affected version unknown). It has been classified as problematic. This affects an unknown functionality. The manipulation with an unknown input leads to a integer overflow vulnerability. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on integrity, and availability. The summary by CVE is:

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.

The advisory is shared at access.redhat.com. This vulnerability is uniquely identified as CVE-2026-57965 since 06/26/2026. The exploitability is told to be easy. An attack has to be approached locally. Additional levels of successful authentication are necessary for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/29/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-40049). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Red Hat

Name

• spice-vdagent

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion