CVE-2023-38023

CVE-2023-38023 is a medium-severity information disclosure vulnerability affecting SCONE Confidential Computing Platform before version 5.8.0 and Intel SGX. The flaw stems from a lack of pointer-alignment logic in specific entry functions, allowing a local attacker to access unauthorized information, referred to as an "AEPIC Leak." The CVSS score of 5.5 indicates a low attack complexity and privilege requirement, with a high impact on confidentiality. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.