CVE-2021-22548
Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jun 8, 2021
- Updated
- Sep 17, 2024
- Reserved
- Jan 5, 2021
Description
An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L |
Weaknesses
- CWE-788 Access of Memory Location After End of Buffer
Affected Products
| Product | Versions |
|---|---|
AsyloGoogle LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.