Occlum Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Occlum Project records in CISA KEV

No Occlum Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Occlum 1 record LOW

Records

1 record

TI-2021-20036 CVE-2021-44421 · GHSA-pj6m-jc6g-72c4

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX…

LOW 25

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00436 Published 2022-03-06 No fix listed CWE-203

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0