CVE-2020-8935

Published December 15th, 2020

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

google/asylo

An open and flexible framework for developing enclave applications

GitHub

979