Skip to content
Sign in
6.5 Medium

CVE-2021-22548 An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted…

Description

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

Affected products and versions

Product Affected versions Fixed in
Asylo 0.6 earliest → 0.6.2 No fix stated

Other CVEs of Asylo

The 16 CVEs of Asylo →
CVE-2021-22552 An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall… 5.3 Medium CVE-2021-22549 An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory 6.5 Medium CVE-2021-22550 An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave 6.5 Medium CVE-2020-8944 An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to… 5.3 Medium
Track this CVE