The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation. https://nvd.nist.gov/vuln/detail/CVE-2018-5683
