CVE-2021-44078

CVE-2021-44078 is a high-severity vulnerability in the Unicorn Engine (before version 2.0.0-rc5) that allows local attackers to escape the sandbox. The flaw resides in the virtual memory manager's split_region function, specifically a faulty comparison of GVA and GPA during memory block freeing. This enables an attacker, who has already gained code execution within the sandbox, to execute arbitrary code on the host machine. The vulnerability has a CVSS score of 8.1 (High), indicating a local attack vector with high complexity, but leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal.