CVE-2009-3616

CRITICAL

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a...

Affects 3 products across 2 vendors.

CVSS 3.19.9
EPSS3.9%
Percentile90th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-416: Use After Free

Software references memory after it has been freed, leading to corruption, crashes, or code execution.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2009. A critical vulnerability affects Qemu systems (CVE-2009-3616). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2009-GLOBAL-310810-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2009-3616?
This vulnerability was disclosed in 2009. A critical vulnerability affects Qemu systems (CVE-2009-3616). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2009-3616?
CVE-2009-3616 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 3.9%.
Is CVE-2009-3616 actively exploited?
No confirmed active exploitation of CVE-2009-3616 as of 2026-09-25.
How do I remediate CVE-2009-3616?
Priority: MEDIUM. Advisory: http://rhn.redhat.com/errata/RHEA-2009-1272.html
What systems are affected by CVE-2009-3616?
CVE-2009-3616 affects Qemu Qemu; Redhat Enterprise Linux Server, Enterprise Linux Workstation.
Vulnerability Details
CVE IDCVE-2009-3616
BSIDBS-2009-GLOBAL-310810-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2009-10-23
Last Modified2026-06-16
ICS Relevance0%
Weakness (CWE)
Use After Free
SourceNVD
Official Description

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Qemu Qemu ≤ 0.10.6
Redhat Enterprise Linux Server 5.0
Redhat Enterprise Linux Workstation 5.0
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6201 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash546ab98b5ee7a0f0f1866798c73b866c8975502a48da3b63110a9961945b3f50e3beb796727341264890bc031630a82064e9c582ea2fa65ab16b0ffd3748e42a
Related CVEs affecting Qemu
CVE-2022-36648 10.0 The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model ... CVE-2015-8556 10.0 Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. CVE-2017-16845 10.0 hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during gue... CVE-2017-2620 9.9 Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator... CVE-2016-9603 9.9 A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator...
View all Qemu CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →