CVE-2022-29694

    Dashboard / Vulnerabilities / CVE-2022-29694

    CVE-2022-29694

    Published: 27 May 2022Last Modified: 12 Aug 2026

    Summary:

    Details: Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free.

    References: https://github.com/unicorn-engine/unicorn/pull/1593/commits/31389e59457f304be3809f9679f91a42daa7ebaa, https://github.com/unicorn-engine/unicorn/pull/1593/commits/6a879a082d4d67a5d13f1233ae0334cde0a7f844, https://violentbinary.github.io/posts/2-simple-analysis-of-software-virtualization-of-memory-in-unicorn-engine/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29694.json, https://nvd.nist.gov/vuln/detail/CVE-2022-29694, https://github.com/unicorn-engine/unicorn/issues/1588, https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -6c1cbef6ac505d355033aef1176b684d02e1eb3a

    Affected versions

    2.0.0-NA
    2.0.0-rc1
    2.0.0-rc2
    2.0.0-rc3
    2.0.0-rc4
    2.0.0-rc5
    2.0.0-rc6
    2.0.0-rc7
    2.0.0-rc5.post1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-29694 | CVE-DB