CVE-2021-4207: 
NixOS vulnerability analysis and mitigation

CVE-2021-4207 is a security vulnerability discovered in the QXL display device emulation in QEMU. The vulnerability involves a double fetch of guest-controlled values cursor->header.width and cursor->header.height which can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow (CVE Mitre, NVD).

The vulnerability stems from a double fetch condition in the qxl_cursor() function within QEMU's QXL video accelerator implementation. This condition leads to a heap overflow in the qxl_unpack_chunks function. The issue was fixed in QEMU version 7.0.0 through a patch (Red Hat Bugzilla).

A malicious privileged guest user could exploit this vulnerability to either crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process (CVE Mitre).

The vulnerability was addressed in QEMU version 7.0.0. Various Linux distributions have released security updates to patch this vulnerability, including Red Hat Enterprise Linux through RHSA-2022:5821, Debian through DSA-5133-1, and Gentoo through GLSA 202208-27 (Red Hat Errata, Debian Security, Gentoo Security).