CVE-2021-44078
1 advisory.
PyPI/unicorn CVE-2021-44078: unknown
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
Action: Upgrade unicorn to 2.0.0rc1 or later.
pip install unicorn==2.0.0rc1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0rc1 | - |
Fixed versions
| 2.0.0rc1 |
Sources
- osv: PYSEC-2021-868
- https://gist.github.com/jwang-a/cb4b6e9551457aa299066076b836a2cd
- https://github.com/unicorn-engine/unicorn/compare/2.0.0-rc4...2.0.0-rc5
- https://github.com/jwang-a/CTF/blob/master/MyChallenges/Pwn/Unicorns_Aisle/UnicornsAisle.pdf
- https://github.com/unicorn-engine/unicorn/commit/c733bbada356b0373fa8aa72c044574bb855fd24
- https://www.unicorn-engine.org/changelog/
CVE-2021-44078 · published · modified · JSON