CVE-2021-22550

Katalog CVE

CVSS 7.8 · High EPSS 0,10%

Kerentanan Use of Out-of-range Pointer Offset pada google asylo. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c

Rincian

Terbit di NVD

8 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-823: Use of Out-of-range Pointer Offset
CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

0,10% peluang dieksploitasi; lebih tinggi dari 0,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c patch · advisory pihak ketiga