Cxl โ€” PoC Archivehttps://poc.intelseclab.com/tags/cxl/Latest proof-of-concept entries.Hugoen-usFri, 03 Jul 2026 00:00:00 +0000QEMU CXL Type-3 Mailbox Guest-to-Host Escapehttps://poc.intelseclab.com/pocs/binary/2026-07-03_qemu-cxl-type3-mailbox-escape/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_qemu-cxl-type3-mailbox-escape/Critical severity โ€” binary ยท None assigned as of 2026-07-03. Status: Weaponized. Affects: QEMU (CXL Type-3 device emulation, hw/cxl/cxl-mailbox-utils.c). Tags: qemu, cxl, virtualization, vm-escape, memory-corruption, mailbox, guest-to-host, pointer-leak.binaryCriticalqemucxlvirtualizationvm-escapememory-corruptionmailboxguest-to-hostpointer-leakQEMUtiny - QEMU CXL Type-3 Memory Corruption Chainhttps://poc.intelseclab.com/pocs/binary/2026-05-16_qemutiny-memory-corruption/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-16_qemutiny-memory-corruption/Critical severity โ€” binary. Status: Weaponized. Affects: QEMU CXL Type-3 device emulation (hw/cxl/cxl-mailbox-utils.c). Tags: QEMU, CXL, memory-corruption, OOB-read, OOB-write, guest-to-host-escape, local, root-in-guest.binaryCriticalQEMUCXLmemory-corruptionOOB-readOOB-writeguest-to-host-escapelocalroot-in-guest