Firecracker vulnerabilities

2 known vulnerabilities in Firecracker from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  firecracker: Detection of Error Condition Without Action

  CVE-2026-122192Nov 4, 2026AWS

  Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snaps

• 7.5 High severity

  Firecracker: Divide By Zero

  CVE-2026-5747Apr 8, 2026AWS

  An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the