All CVEs — page 437 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vm2 library has a memory safety flaw where Buffers returned from Node's zlib module can leak memory from the host process, allowing attackers to read and modify unrelated host buffers. This breaks the sandbox boundary by exposing internal memory structures to untrusted guest code.
The flaw allows untrusted guest code to bypass authorization and execute arbitrary code in the host process, posing a critical risk.
The flaw allows out-of-bounds write in the L2TP Control Channel Parser, enabling remote code execution.