CVE-2022-38155: High severity samsung mtower vulnerability
TEEMalloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38155?
CVE-2022-38155 has a high severity rating due to its potential to cause crashes and disrupt trusted applications.
How do I fix CVE-2022-38155?
To fix CVE-2022-38155, update the Samsung mTower software to a version beyond 0.3.0 which addresses the excessive memory allocation issue.
What does CVE-2022-38155 affect?
CVE-2022-38155 affects the Samsung mTower software version 0.3.0 and earlier.
What is the root cause of CVE-2022-38155?
The root cause of CVE-2022-38155 is excessive memory allocation in the TEE_Malloc function due to large len values.
How can CVE-2022-38155 impact system security?
CVE-2022-38155 can impact system security by allowing a trusted application to crash, potentially leading to a denial of service situation.