Agree. There have been several vulns in the fringes of QEMU device emulation code before but typically in lesser used devices (floppy etc). OTOH it's very commo

Agree. There have been several vulns in the fringes of QEMU device emulation code before but typically in lesser used devices (floppy etc). OTOH it's very common to use CDROM emulation to install systems and I'm sure there are plenty of admins who leave the ISO exposed to the guest "just in case".