CVE-2020-5499: Apache Rust Sgx SDK

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same.

Affected products

• Apache Rust Sgx SDK: up to and including 1.0.8

Published 2020-01-04. Last modified 2026-06-17.