Skip to content
Sign in
6.5 Medium

CVE-2021-22550 An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave

Description

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c

Affected products and versions

Product Affected versions Fixed in
Asylo 0.6 earliest → 0.6.1 No fix stated

Other CVEs of Asylo

The 16 CVEs of Asylo →
CVE-2021-22552 An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall… 5.3 Medium CVE-2021-22549 An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory 6.5 Medium CVE-2021-22548 An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted… 6.5 Medium CVE-2020-8944 An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to… 5.3 Medium
Track this CVE