CVE-2022-46486: Scontain Scone

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.

Affected products

• Scontain Scone: before 5.8.0 (fixed in 5.8.0)

Published 2023-12-30. Last modified 2026-06-17.