2 matches found
py39-unicorn -- sandbox escape and arbitrary code execution vulnerability
jwang-a reports: An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw...
8.1CVSS8.2AI score0.00528EPSS
SaveExploits0References1
PT-2021-24036
Name of the Vulnerable Software and Affected Versions: Unicorn Engine versions prior to 2.0.0-rc5 Description: The issue is related to the virtual memory manager, specifically in the split region function in uc.c. It allows local attackers to escape the sandbox by exploiting a faulty comparison o...
8.1CVSS0.00528EPSS
SaveExploits0References8
20