CVE-2020-8944

CVE-2020-8944 is an arbitrary memory write vulnerability affecting Google Asylo versions up to 0.6.0. An authenticated local attacker can exploit this flaw by crafting a malicious call to ecall_restore, leading to unauthorized writes to arbitrary memory addresses, including those within secure enclaves. While rated Medium severity (CVSS 5.5) due to its local attack vector and high integrity impact, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability. Organizations using affected Asylo versions are advised to upgrade past commit 382da2b8b09cbf928668a2445efb778f76bd9c8a to mitigate this risk.