NetSight
high7.5

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01.

Impact

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.

Affected products

VendorProductAffected versions
UcbriseOpaque
before 2018-12-01

Weakness classification

References