Skip to content
OpenAdvisories

Product · AWS

Firecracker

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-122192

    Guest access to Firecracker process memory after a failed memory discard

    Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snap…

    AWS Firecracker
  • High 7.5
    CVE-2026-5747

    Out-of-bounds Write in Firecracker virtio-pci Transport

    An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on th…

    AWS Firecracker