Vulnerabilities > Google > Asylo > Low

DATE CVE VULNERABILITY TITLE RISK
2020-12-15 CVE-2020-8937 Out-of-bounds Write vulnerability in Google Asylo
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the pointer is located.
local
low complexity
google CWE-787
3.3
2020-12-15 CVE-2020-8938 Out-of-bounds Write vulnerability in Google Asylo
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which allows an attacker to write memory values from within the enclave.
local
low complexity
google CWE-787
3.3