Vendor
An authenticated attacker can trigger a heap-based buffer overflow in spice-server during VM live migration by exploiting an integer truncation vulnerability in the GLZ encoder dictionary restore path.