CVE-2021-22550

CVE-2021-22550 is a high-severity vulnerability affecting Google Asylo, allowing an attacker to modify pointers within enclave memory to overwrite arbitrary memory addresses inside the secure enclave. With a CVSS score of 7.8, this local attack requires low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are available, and there's no evidence of active exploitation, the vulnerability has received minimal community discussion or media coverage. Organizations are advised to update Asylo to a version past 0.6.3 or apply the specified git commit to mitigate this risk.