# CVE-2026-3195

> A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.

- **CVSS:** 7.4 (HIGH)
- **CWE:** CWE-122

Canonical: https://intel.threadlinqs.com/cve/CVE-2026-3195
Full threat coverage + IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp