FI
Product
Firecracker
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Firecracker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18960 | 9.8 | Dec 11 | Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0 Affected: 0.18.0; 0.19.0 |
| CVE-2026-5747 | 7.5 | Apr 7 | Out-of-bounds Write in Firecracker virtio-pci Transport Affected: 1.13.0 through 1.14.3; 1.15.0; 1.15.0 |
| CVE-2020-27174 | 7.5 | Oct 16 | In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input Affected: before 0.21.3; 0.22.0 before 0.22.1 |
| CVE-2026-1386 | 6.0 | Jan 23 | Arbitrary Host File Overwrite via Symlink in Firecracker Jailer Affected: before 1.13.2; 1.14.0; 1.14.0 |
| CVE-2020-16843 | 5.9 | Aug 4 | In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic Affected: 0.20.0; 0.21.0; 0.21.1 |
Showing 5