Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Rust Sgx Sdk
NVD
GitHub
CVSS 3.1
9.8
EPSS
3.2%