CVE-2021-44421

CVE-2021-44421 is a medium-severity vulnerability affecting Occlum versions prior to 0.26.0, specifically impacting Intel SGX environments. It involves a confused deputy issue in the pointer-validation logic that allows a local attacker to gain unauthorized information through side-channel analysis. The vulnerability has a CVSS score of 5.5, indicating low attack complexity and privileges required, with a high impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.