PT-2020-20361

Name of the Vulnerable Software and Affected Versions Asylo versions prior to 0.6.0 Description The issue is related to an arbitrary memory overwrite in the trusted memory of Asylo. It occurs because the ecall restore function does not properly validate the range of the output len pointer, allowi...

CVE-2020-8904

An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecallrestore function fails to validate the range of the outputlen pointer, an attacker can manipulate the tmpoutputlen value and write to an arbitrary location in the trusted...