Critical isolated-vm Flaw Lets Attackers Escape Sandbox and Hijack Host Control Flow
ID: 78e39810-c5f4-5042-a3f4-72295c4aa72f
STIX ID: report--78e39810-c5f4-5042-a3f4-72295c4aa72f
Feed Name: GBHackers
Threat Score
A critical type-confusion vulnerability in isolated-vm's ExternalCopy transferList handling (GHSA-864f-rcv7-6rh4) permits attacker-controlled TOCTOU behavior that can produce host-process memory corruption, reliable crashes (DoS), and has been demonstrated to enable control-flow hijacking; fixes are available in isolated-vm 7.0.1 and 6.2.0 and users should upgrade and minimize References exposed to untrusted code.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.