#vhost-user-gpu

QEMU patches heap overflow in vhost-user-gpu backend

CVE-2026-15264 let a malicious guest overflow a host heap buffer via crafted 2D resource dimensions.