{"id":"CVE-2019-0122","aliases":["EUVD-2019-0929","GHSA-364f-vpc5-cg4x"],"status":"published","title":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows...","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00348,"percentile":0.28591,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-415"],"published":"2019-03-14T20:00:00Z","modified":"2026-06-17T02:07:44Z","products":[{"vendor":"intel","product":"software_guard_extensions_sdk"},{"vendor":"intel corporation","product":"intel(r) software guard extensions sdk"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00217.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0122"},{"url":"https://github.com/advisories/GHSA-364f-vpc5-cg4x"}],"sources":{"cve":[{"id":"CVE-2019-0122","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","status":"published","published":"2019-03-14T20:00:00Z","modified":"2024-09-16T18:49:09.236Z","updated_at":"2026-11-02T14:32:24.473448Z"}],"euvd":[{"id":"EUVD-2019-0929","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","status":"published","published":"2019-03-14T20:00:00Z","modified":"2024-09-16T18:49:09Z","updated_at":"2026-11-03T00:55:29.13849Z"}],"ghsa":[{"id":"GHSA-364f-vpc5-cg4x","title":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows...","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","status":"published","published":"2022-05-14T01:19:56Z","modified":"2023-02-02T05:03:30Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:51:39.380797Z"}],"nvd":[{"id":"CVE-2019-0122","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","status":"published","published":"2019-03-14T20:29:01.537Z","modified":"2026-06-17T02:07:44.557Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:05:07.268578Z"}],"osv":[{"id":"CVE-2019-0122","description":"Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.","status":"published","published":"2019-03-14T20:29:01.537Z","modified":"2026-04-11T14:10:58.308888Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.051046Z"}]}}