QEMU’s built‑in VNC server contains a deceptively simple bug — a NULL pointer dereference in qemu_clipboard_request() that can be reached by processing a malformed ClientCutText sequence — and the result is a stable, remotely reachable denial‑of‑service that administrators must treat as a...