VULNERABILITY INTELLIGENCE

CVE-2021-22549

CVSS score6.5 MEDIUM

EPSS probability0.12%

CISA KEVNot currently listed

Published2021-06-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Description

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

Weakness classification

CWE-668: Exposure of Resource to Wrong Sphere
CWE-823: Use of Out-of-range Pointer Offset

Primary references

cve-coordination@google.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory