CVE-2019-12439

Bubblewrap (before 0.3.3) is affected by CVE-2019-12439 due to misusing temporary directories in /tmp as a mount point, with configurations involving XDG_RUNTIME_DIR. This can let a local attacker block other users from running bubblewrap or potentially execute code. A patched version exists (0.3...

CVE-2020-5291

Bubblewrap (bwrap)

CVE-2017-5226

CVE-2017-5226 is described across connected docs as a bubblewrap sandbox escape via TIOCSTI: a nonprivileged session could push characters into the terminal input buffer to escape the sandbox. Related entries (e.g., CVE-2020-13753) note this as part of a family using TIOCSTI and CLONE_NEWUSER, hi...