Medium severity5.5NVD Advisory· Published Dec 30, 2023· Updated Jun 17, 2026

CVE-2022-46486

Description

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.

Affected products

Scontain/SCONE
cpe:2.3:a:scontain:scone:*:*:*:*:*:*:*:*
Range: <5.8.0
SCONE/SCONEdescription
SCONE/__scone_dispatchllm-create
Range: <5.8.0

Patches

Vulnerability mechanics

References

jovanbulck.github.io/files/ccs19-tale.pdfnvdExploitTechnical DescriptionThird Party Advisory
jovanbulck.github.io/files/oakland24-pandora.pdfnvdExploitTechnical DescriptionThird Party Advisory
sconedocs.github.io/release5.7/nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000