CVE-2021-22548

    Dashboard / Vulnerabilities / CVE-2021-22548

    CVE-2021-22548

    Published: 8 Jun 2021Last Modified: 9 Jul 2026

    Summary:

    Details: An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

    References: https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -64ae5eaf46ba54b54be187a0cbf946a900af1d45

    Affected versions

    v0.6.2
    v0.6.1
    v0.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-22548 | CVE-DB