Medium severity5.3NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026
CVE-2021-22552
CVE-2021-22552
Description
An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asylo 0.6.3 or past https://github.com/google/asylo/commit/90d7619e9dd99bcdb6cd28c7649d741d254d9a1a
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Google LLC/Asylov5Range: unspecified
Patches
Vulnerability mechanics
References
1- github.com/google/asylo/commit/90d7619e9dd99bcdb6cd28c7649d741d254d9a1anvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.