CVE-2026-77178 PUBLISHED

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.

• https://www.oracle.com/
• https://www.virtualbox.org/wiki/Download_Old_Builds_7_0
• https://gist.github.com/entropy1337/cd0d5b368445d20c43aca2590b313892

• n/a text