CWE-823
Use of Out-of-range Pointer Offset
Description
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-129
CVEs mapped to this weakness (105)
page 6 of 6| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-3889 | Hig | 0.00 | 8.1 | 0.01 | Oct 19, 2021 | libmobi is vulnerable to Use of Out-of-range Pointer Offset | ||
| CVE-2021-3888 | Hig | 0.00 | 8.1 | 0.01 | Oct 19, 2021 | libmobi is vulnerable to Use of Out-of-range Pointer Offset | ||
| CVE-2021-22550 | Med | 0.00 | 6.5 | 0.00 | Jun 8, 2021 | An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c | ||
| CVE-2021-22549 | Med | 0.00 | 6.5 | 0.00 | Jun 8, 2021 | An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c | ||
| CVE-2020-8904 | Med | 0.00 | 6.4 | 0.00 | Aug 12, 2020 | An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to an arbitrary… |
- risk 0.00cvss 8.1epss 0.01
libmobi is vulnerable to Use of Out-of-range Pointer Offset
- risk 0.00cvss 8.1epss 0.01
libmobi is vulnerable to Use of Out-of-range Pointer Offset
- risk 0.00cvss 6.5epss 0.00
An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c
- risk 0.00cvss 6.5epss 0.00
An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c
- risk 0.00cvss 6.4epss 0.00
An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to an arbitrary…