CVE-2021-22549 — Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall

CVE-2021-22549

Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall PUBLISHED

Description (CNA)

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

Affected (CNA)

Vendor / product	Versions
Google LLC / Asylo	affected unspecified through 0.6.2

CWE

CWE-823

References

https://github.com/google/asylo/commit/ecfcd0008b6f8f63c6fa3cc1b62fcd4a52f2c0ad

ADP enrichment

CVE

No English description supplied.

https://github.com/google/asylo/commit/ecfcd0008b6f8f63c6fa3cc1b62fcd4a52f2c0ad