CVE-2022-35858: High severity samsung mtower vulnerability
The TEEPopulateTransientObject and uteefromattr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEEPopulateTransientObject with a large number in the parameter attrCount.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35858?
CVE-2022-35858 has been classified as a high severity vulnerability due to its potential for memory overwrite and denial of service.
How do I fix CVE-2022-35858?
To mitigate CVE-2022-35858, update to a patched version of Samsung mTower, as version 0.3.0 contains the vulnerability.
What are the potential impacts of CVE-2022-35858?
The impacts of CVE-2022-35858 include memory overwrite, denial of service, and information disclosure.
Which version of Samsung mTower is affected by CVE-2022-35858?
Samsung mTower version 0.3.0 is affected by CVE-2022-35858.
Who can exploit CVE-2022-35858?
Trusted applications within the Samsung mTower environment can exploit CVE-2022-35858 by invoking the vulnerable function with a large parameter.