CVE-2026-5747— Out-of-bounds Write in Firecracker virtio-pci Transport
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-5747
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds Write in Firecracker virtio-pci Transport
Source: NVD (National Vulnerability Database)
Vulnerability Description
An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue configuration registers after device activation. Achieving code execution on the host requires additional preconditions, such as the use of a custom guest kernel or specific snapshot configurations. To remediate this, users should upgrade to Firecracker 1.14.4 or 1.15.1 and later.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存写
Source: NVD (National Vulnerability Database)
Vulnerability Title
Amazon Firecracker 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amazon Firecracker是美国亚马逊（Amazon）公司的一种专门用于创建和管理多租户容器和基于函数的服务的虚拟化技术。它是一种虚拟化技术，提供 Serverless 操作模型，专门用于创建和管理多租户容器与基于函数的服务。 Amazon Firecracker 1.13.0至1.14.3版本和1.15.0版本存在安全漏洞，该漏洞源于virtio PCI传输中存在越界写入问题，可能导致具有root权限的本地访客用户崩溃Firecracker VMM进程或在主机上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AWS | Firecracker | 1.13.0 ~ 1.14.3 | - |
II. Public POCs for CVE-2026-5747
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-5747
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: AWS
- CVE-2026-7461
OS Command Injection in Amazon ECS Agent via FSx Windows Fil - CVE-2026-7426
Out-of-Bounds Write via Unsanitized Prefix Length in Router - CVE-2026-7425
Out-of-Bounds Read in Router Advertisement Option Parser in - CVE-2026-7424
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Pl - CVE-2026-7423
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-
V. Comments for CVE-2026-5747
No comments yet