Unicorn-Engine Unicorn Engine
7 CVEs affecting Unicorn-Engine Unicorn Engine. Latest disclosed: 2022-06-02. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44078 | High | 8.1 | 2021-12-26 | An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obt… |
CVE-2022-29692 | High | 7.8 | 2022-06-02 | Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. |
CVE-2022-29695 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization. |
CVE-2022-29694 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. |
CVE-2022-29693 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c. |
CVE-2021-36979 | Medium | 5.5 | 2021-07-20 | Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb). |
CVE-2020-36431 | Medium | 5.5 | 2021-07-20 | Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm. |