Kang Li (Baidu Security)

Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall

Memory overread secure enclave in Asylo 0.6.2

Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall

Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer

Arbitrary enclave memory location write from untrusted environment

Unchecked buffer overrun in enc_untrusted_recvfrom

Arbitrary enclave memory location write from untrusted environment

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

Out of Bounds read in Asylo

Arbitrary enclave memory overwrite vulnerability in ECall ecall_restore