CVE-2021-36219

An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed,...

CVE-2021-36219

creationtimestamp| type| source ---|---|--- 2021-09-27 18:34:51+00:00| seen| https://t.me/cibsecurity/29474 2022-07-17 06:24:03+00:00| seen| https://t.me/itsecnews/1020...

CVE-2021-36219

An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed,...

CVE-2021-36219

CVE-2021-36219 – SKALE sgxwallet vulnerability affecting sgxwallet 1.58.3 where the ECALL 14 input triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker could chain multiple enclave calls to craft a stack containing a valid address, which is then f...