CVE-2018-20742: Ucbrise Opaque

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.

Affected products

• Ucbrise Opaque: before 2018-12-01 (fixed in 2018-12-01)

Published 2019-01-24. Last modified 2026-06-17.