High severity7.5OSV Advisory· Published Jan 24, 2019· Updated Jun 17, 2026

CVE-2018-20742

Description

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mc2 Project/Opaque SQLOSV
Ucbrise/Opaque
cpe:2.3:a:ucbrise:opaque:*:*:*:*:*:*:*:*
Range: <2018-12-01
UC Berkeley RISE/opaquellm-create
Range: <2018-12-01

Patches

Vulnerability mechanics

References

github.com/ucbrise/opaque/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36nvdPatchThird Party Advisory
github.com/ucbrise/opaque/issues/66nvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000