[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpXKmJhRLeRTTbNr7qR9FBKzr2JglgVujcNBjBSYjOlg":3,"g5a-ex:google\u002Fasylo@*":139,"g5a-family:google\u002Fasylo":141},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":68,"kevVulnerabilities":116,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"google","asylo",17,16,0,"2021-08-02",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.3",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.4",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.4.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.4.2",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0","Asylo by Google is a technology product with 17 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},[69,77,83,89,93,99,103,107,110,113],{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":76},"CVE-2020-8905","A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'enc_untrusted_recvfrom' function generates a return value which is deserialized by 'MessageReader', and copied into three different 'extents'. The length of the third 'extents' is controlled by the outside world, and not verified on copy, allowing the attacker to force Asylo to copy trusted memory data into an untrusted buffer of significantly small length.. We recommend updating Asylo to version 0.6.0 or later.","2020-08-12",6.5,"v3.1","Medium",0.00239,{"cveId":78,"description":79,"publishedDate":72,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":16,"epssScore":82},"CVE-2020-8904","An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to an arbitrary location in the trusted (enclave) memory. We recommend updating Asylo to version 0.6.0 or later.",9.6,"Critical",0.00232,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":88},"CVE-2020-8944","An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to arbitrary memory addresses including those within the secure enclave We recommend upgrading past commit 382da2b8b09cbf928668a2445efb778f76bd9c8a","2020-12-15",5.5,0.00158,{"cveId":90,"description":91,"publishedDate":12,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":92},"CVE-2021-22552","An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asylo 0.6.3 or past https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fasylo\u002Fcommit\u002F90d7619e9dd99bcdb6cd28c7649d741d254d9a1a",0.00151,{"cveId":94,"description":95,"publishedDate":86,"cvssScore":96,"cvssVersion":74,"severity":97,"isKev":16,"epssScore":98},"CVE-2020-8935","An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.",7.8,"High",0.00141,{"cveId":100,"description":101,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":102},"CVE-2020-8941","An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading past commit 8fed5e334131abaf9c5e17307642fbf6ce4a57ec",0.00139,{"cveId":104,"description":105,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":106},"CVE-2020-8936","An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params and allowed the host to return a pointer that was an address within the enclave memory. This allowed an attacker to read memory values from within the enclave.",0.00135,{"cveId":108,"description":109,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":106},"CVE-2020-8939","An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4",{"cveId":111,"description":112,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":106},"CVE-2020-8940","An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading or past commit fa6485c5d16a7355eab047d4a44345a73bc9131e",{"cveId":114,"description":115,"publishedDate":86,"cvssScore":87,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":106},"CVE-2020-8942","An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size including memory addresses within the secure enclave. We recommend upgrading past commit b1d120a2c7d7446d2cc58d517e20a1b184b82200",[],{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Asylo by Google - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Asylo by Google covering 17 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Asylo vulnerabilities, Asylo security, Asylo CVE, Google Asylo, Asylo threat intelligence, Google security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Asylo","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fgoogle\u002Fasylo",{"@type":127,"name":128,"url":129},"Organization","Google","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgoogle","Security Software","17 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Asylo Security Vulnerabilities","Security vulnerabilities affecting Asylo by Google",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-28T15:54:58.328Z","3.0",{"rows":140,"total":11,"capped":16,"failed":11},[],[]]