Tag: host escape vulnerability

1 article

Cluttered developer workstation with laptop, notes, and diagrams in natural daylight.

Isolated-vm Flaw Exposes Sandbox to Host Escape Vulnerability

A critical flaw in the isolated-vm library can allow code running in a sandboxed environment to corrupt memory in the host process, exposing it to a host escape vulnerability. This vulnerability is triggered by a type confusion in the ExternalCopy's handling of the transferList option.

Analyst 207