Vulnerability · Published Jul 20, 2021 · Assigned by mitre

CVE-2021-36979

Medium 5.5

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.9%top 40.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unicorn/OSV-2020-2305.yaml x_refsource_MISC
https://github.com/unicorn-engine/unicorn/commit/bf1713d9e011b55ca1f502a6779fc4722b4bb077 x_refsource_MISC
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30391 x_refsource_MISC
FEDORA-2021-53dd27bb86 vendor-advisory, x_refsource_FEDORA