Vulnerabilities > CVE-2022-46486 - Release of Invalid Pointer or Reference vulnerability in Scontain Scone

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
scontain
CWE-763

Summary

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.

Vulnerable Configurations

Part Description Count
Application
Scontain
5

Common Weakness Enumeration (CWE)