PT-2021-15139
CVE-2021-22552
·
Published
2021-08-02
·
Updated
2021-08-10
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Asylo versions up to 0.6.1
Description
The issue allows an untrusted attacker to bypass validation by passing a syscall number in
MessageReader that is then used by sysno(), potentially enabling the attacker to read memory from within the secure enclave.Recommendations
Update to Asylo 0.6.3 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾