CVE-2023-38023: Scontain Scone

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_dispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."

Affected products

• Scontain Scone: before 5.8.0 (fixed in 5.8.0)

Published 2023-12-30. Last modified 2026-06-17.