{"id":"CVE-2022-29694","details":"Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free.","modified":"2026-07-22T02:24:51.815573Z","published":"2022-05-27T19:07:46Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29694.json"},"references":[{"type":"WEB","url":"https://github.com/unicorn-engine/unicorn/pull/1593/commits/31389e59457f304be3809f9679f91a42daa7ebaa"},{"type":"WEB","url":"https://github.com/unicorn-engine/unicorn/pull/1593/commits/6a879a082d4d67a5d13f1233ae0334cde0a7f844"},{"type":"WEB","url":"https://violentbinary.github.io/posts/2-simple-analysis-of-software-virtualization-of-memory-in-unicorn-engine/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29694.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29694"},{"type":"REPORT","url":"https://github.com/unicorn-engine/unicorn/issues/1588"},{"type":"FIX","url":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/unicorn-engine/unicorn","events":[{"introduced":"0"},{"fixed":"6c1cbef6ac505d355033aef1176b684d02e1eb3a"},{"introduced":"6c1cbef6ac505d355033aef1176b684d02e1eb3a"},{"fixed":"3d3deac5e6d38602b689c4fef5dac004f07a2e63"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.0.0"},{"introduced":"2.0.0-NA"},{"last_affected":"2.0.0-NA"},{"introduced":"2.0.0-rc1"},{"last_affected":"2.0.0-rc1"},{"introduced":"2.0.0-rc2"},{"last_affected":"2.0.0-rc2"},{"introduced":"2.0.0-rc3"},{"last_affected":"2.0.0-rc3"},{"introduced":"2.0.0-rc4"},{"last_affected":"2.0.0-rc4"},{"introduced":"2.0.0-rc5"},{"last_affected":"2.0.0-rc5"},{"introduced":"2.0.0-rc6"},{"last_affected":"2.0.0-rc6"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:unicorn-engine:unicorn_engine:*:*:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:-:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc4:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc5:*:*:*:*:*:*","cpe:2.3:a:unicorn-engine:unicorn_engine:2.0.0:rc6:*:*:*:*:*:*"]}}],"versions":["2.0.0-NA","2.0.0-rc1","2.0.0-rc2","2.0.0-rc3","2.0.0-rc4","2.0.0-rc5","2.0.0-rc6","2.0.0-rc7","2.0.0-rc5.post1","1.0.3","1.0.2","1.0.2-rc6","1.0.2-rc5","1.0.2-rc4","1.0.2-rc3","1.0.2-rc2","1.0.2-rc1","1.0-rc2","0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29694.json","vanir_signatures_modified":"2026-07-22T02:24:51Z","vanir_signatures":[{"source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63","target":{"file":"qemu/softmmu/memory.c","function":"memory_map"},"deprecated":false,"digest":{"function_hash":"57197218022180332029012659235852810667","length":323},"id":"CVE-2022-29694-08517c98","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["308600573447663130433121437942955333865","109083104320806874996481558287097527949","177410210465881187526417630355072942488","15828335982198465697662675026334678390","133747491020609123376309782053041098215","271588029713434337005423360516648859712","96393868979709539864767097434896495845","254046342428748865190149587225210946197","277246730259502992074212413990283741971","8611105095302960023874188317667841036","259061879287453919374552563417197130907","214446408388160387107947248898116668869","298073106364058328762962587426647663935","332241021101354056092356743740119301149","140044777583130453279366797963728285028","294602386746962673904987243908768630237","187174703570556242760418678188724567238","241775393584919973585779827867084316522","340195396235112984491756103734379960363","167926962073368270654022756838995677099","164863463603398158758508628729653642668","207367294853913214992614275436944345298","208868835204625528500129709717050125346","25902312793650850382878038854681794414","11156744294129031396554566495903143744","95789109536063639014345968372153420675","317868911501796253924554182450748787451","185956423160998449908816407642247296528"]},"id":"CVE-2022-29694-089ea41c","signature_type":"Line","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63","target":{"file":"qemu/exec.c"}},{"signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63","target":{"file":"qemu/softmmu/memory.c"},"deprecated":false,"digest":{"line_hashes":["145234166717582143871419400829935356137","109857069700405777429143447568146911127","25266202286546595568419732596259792578","142830589795001268889067779588170467908","336901335988289709413227692155086619882","94539448328649383788159985444387401928","172573637811855442352101868234042473226","142830589795001268889067779588170467908"],"threshold":0.9},"id":"CVE-2022-29694-267ee155","signature_type":"Line"},{"target":{"file":"qemu/exec.c","function":"ram_block_add"},"deprecated":false,"digest":{"function_hash":"127853111933722632474292464332709210952","length":686},"id":"CVE-2022-29694-45d6cbf8","signature_type":"Function","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63"},{"target":{"file":"tests/unit/test_mem.c"},"deprecated":false,"digest":{"line_hashes":["178790017841571358465422271895205079514","141057112516930555793303917271725554801","153653510411816242079289134975402976538","297662366214489317639320460317614868332","60523143183956324176886407903482117536"],"threshold":0.9},"id":"CVE-2022-29694-4cedb5cc","signature_type":"Line","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63"},{"target":{"file":"qemu/include/qemu/atomic.h"},"deprecated":false,"digest":{"line_hashes":["84756660637316240482335271412014678859","93803503311625084680956904611614941116","252618944303880664957082649854413768918","297068215911332262044454794381811974581","337735456836338762613973218636976093869","60666660349281040023325530943781299532"],"threshold":0.9},"id":"CVE-2022-29694-5939f3ab","signature_type":"Line","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63"},{"target":{"file":"qemu/exec.c","function":"qemu_ram_alloc_from_ptr"},"deprecated":false,"digest":{"function_hash":"302865556006637554167031222941344750476","length":540},"id":"CVE-2022-29694-61bdfc35","signature_type":"Function","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63"},{"id":"CVE-2022-29694-f73a8ee9","signature_type":"Function","signature_version":"v1","source":"https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63","target":{"file":"qemu/softmmu/memory.c","function":"memory_map_ptr"},"deprecated":false,"digest":{"function_hash":"287343874688784754573181562434692864351","length":362}}]}}],"schema_version":"1.7.5"}