Amazon / Firecracker
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-5747 | Out-of-bounds Write in Firecracker virtio-pci Transport | HIGH | 8.7 | Apr 7, 2026 |
| CVE-2026-1386 | Arbitrary Host File Overwrite via Symlink in Firecracker Jailer | MEDIUM | 6.0 | Jan 23, 2026 |
| CVE-2020-27174 | In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the s… | HIGH | 7.5 | Oct 16, 2020 |
| CVE-2020-16843 | In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service… | MEDIUM | 5.9 | Aug 4, 2020 |
| CVE-2019-18960 | Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes. | CRITICAL | 9.8 | Dec 11, 2019 |
Showing 1 to 5 of 5 CVEs