CVEs related to bugs in QEMU