CVE-2020-8943

CVE-2020-8943 is an arbitrary memory read vulnerability affecting Google Asylo versions up to 0.6.0. An unvalidated return size in the enc_untrusted_recvfrom function allows an attacker to read memory outside the intended buffer, potentially accessing data within the secure enclave. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Organizations are advised to upgrade past commit 6e158d558abd3c29a0208e30c97c9a8c5bd4230f to mitigate the risk.