CVE-2022-29694

Description

References

• unicorn-engine/unicorn commit 3d3deac · Patch
• unicorn-engine/unicorn · Exploit
• unicorn-engine/unicorn#1593 · Patch
• unicorn-engine/unicorn#1593 · Patch
• violentbinary.github.io/posts/2-simple-analysis-of-software-virtualization-of-memory-in-unicorn-engine · Exploit

unicorn engine의 다른 취약점

• CVE-2022-29695높음 7.5Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization.
• CVE-2022-29693높음 7.5Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c.
• CVE-2022-29692높음 7.8Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function.
• CVE-2021-44078높음 8.1An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An atta…
• CVE-2021-36979보통 5.5Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).