CVE-2020-36431

Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.

• CWE-787

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245Patch, Third Party Advisory
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unicorn/OSV-2020-837.yamlThird Party Advisory
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245Patch, Third Party Advisory
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unicorn/OSV-2020-837.yamlThird Party Advisory

Published

Jul 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36426An issue was discovered in Arm Mbed TLS before 2.24.0. mbedt…7.5
• CVE-2020-36427GNOME gThumb before 3.10.1 allows an application crash via a…5.5
• CVE-2020-36428matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a…8.8
• CVE-2020-36429Variant_encodeJson in open62541 1.x before 1.0.4 has an out-…5.5
• CVE-2020-3643u'Information disclosure issue can occur due to partial secu…5.5
• CVE-2020-36430libass 0.15.x before 0.15.1 has a heap-based buffer overflow…7.8
• CVE-2020-36432An issue was discovered in the alg_ds crate through 2020-08-…9.8
• CVE-2020-36433An issue was discovered in the chunky crate through 2020-08-…7.5
• CVE-2020-36434An issue was discovered in the sys-info crate before 0.8.0 f…9.8
• CVE-2020-36435An issue was discovered in the ruspiro-singleton crate befor…8.1
• CVE-2020-36436An issue was discovered in the unicycle crate before 0.7.1 f…8.1
• CVE-2020-36437An issue was discovered in the conqueue crate before 0.4.0 f…8.1