rust-vmm
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| linux-loader | 1 | – | Dec 13, 2022 |
| vm-memory | 1 | – | Sep 1, 2023 |
| vmm-sys-util | 1 | – | Jan 2, 2024 |
Exploited and recent CVEs
- CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access 0.7%
- CVE-2023-41051 Default functions in VolatileMemory trait lack bounds checks in vm-memory 0.3%
- CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read 0.2%