CVE-2021-22550

MEDIUM

Google Asylo <0.6.3 - Memory Corruption

Title source: llm

Description

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c

Scores

CVSS v3 6.5
EPSS 0.0002
EPSS Percentile 4.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Classification

CWE
CWE-823 CWE-668
Status published

Affected Products (1)

google/asylo < 0.6.3

Timeline

Published Jun 08, 2021
Tracked Since Feb 18, 2026