Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Occlum Project Subscribe
Filtered by product Occlum
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-44421 1 Occlum Project 1 Occlum 2022-03-15 2.1 LOW 5.5 MEDIUM
The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis.