CVE-2021-24117: Apache Teaclave Sgx SDK

Medium severity, CVSS 4.9. EPSS: 2.2% chance of exploitation in the next 30 days.

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

Affected products

• Apache Teaclave Sgx SDK: version 1.1.3 only

Published 2021-07-14. Last modified 2026-06-17.