Lucene search

K
osvGoogleOSV:CVE-2021-22552
HistoryAug 02, 2021 - 4:15 p.m.

CVE-2021-22552

2021-08-0216:15:07
Google
osv.dev
1

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.8%

An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asylo 0.6.3 or past https://github.com/google/asylo/commit/90d7619e9dd99bcdb6cd28c7649d741d254d9a1a

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.8%

Related for OSV:CVE-2021-22552