VDB
CVE-2021-22552
CVE-2021-22552
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asylo 0.6.3 or past https://github.com/google/asylo/commit/90d7619e9dd99bcdb6cd28c7649d741d254d9a1a
EPSS 0.15% · 4.6th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS Score
0.15%
4.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| asylo | 0 | |
| Google LLC | Asylo | unspecified |
Timeline
- Aug 2, 2021 CVE Published
- Aug 3, 2021 EPSS Score
- Oct 1, 2021 EPSS Score
- Nov 29, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 27, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 25, 2022 EPSS Score
- Jul 24, 2022 EPSS Score
- Sep 21, 2022 EPSS Score
- Nov 20, 2022 EPSS Score