CVE-2021-22549
Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jun 8, 2021
- Updated
- Sep 17, 2024
- Reserved
- Jan 5, 2021
Description
An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L |
Weaknesses
- CWE-823 Use of Out-of-range Pointer Offset
Affected Products
| Product | Versions |
|---|---|
AsyloGoogle LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.