CVE-2021-22549

MEDIUM

Google Asylo < 0.6.2 - Arbitrary Trusted Memory Overwrite via Out-of-range Pointer Offset

Title source: llm
STIX 2.1

Description

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0012
EPSS Percentile 2.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Details

CWE
CWE-823 CWE-668
Status published
Products (1)
google/asylo < 0.6.2
Published Jun 08, 2021
Tracked Since Feb 18, 2026