🎯 New Report #3738654: Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability
🔺Severity: None
👽 Reporter: terrynini38514
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-05-15
⏰ Disclosed: 2026-06-11 15:00:03
📝 Summary: A vulnerability was discovered in Firecracker versions up to 1.15.1 that could allow a malicious guest to bypass protection mechanisms and perform out-of-bounds read and write operations on the virtio PCI queue. The vulnerability was caused by inconsistencies in the handling of queue activation state during snapshot restore, which could lead to the reactivation of already validated queues with stale pointers, enabling the guest to mutate the queue configuration and trigger out-of-bounds access.
📂 Report JSON File: 3738654
@hackeronereports