A vulnerability described as critical has been identified in QEMU. This affects the function virtio_snd_pcm_in_cb. Such manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-3195. The attack can only be performed from a local environment. No exploit is available.