Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Unicorn-engine records in CISA KEVNo Unicorn-engine vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01955 · Published 2022-05-27 · No fix listed CWE-476
Priority LOW 36
Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00809 · Published 2022-05-27 · No fix listed CWE-416
Priority LOW 36
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00546 · Published 2021-12-26 · No fix listed CWE-697
Priority LOW 35
Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01144 · Published 2022-05-27 · No fix listed CWE-665
Priority LOW 35
Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01257 · Published 2022-05-27 · No fix listed CWE-401
Priority LOW 27
Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00879 · Published 2021-07-20 · No fix listed CWE-787
Priority LOW 25
Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2021-07-20 · No fix listed CWE-787
THREATIST.IORead the docs