CVE-2022-39829: Null Pointer Dereference
Published Sep 5, 2022
·Updated
There is a NULL pointer dereference in aes256encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVPCIPHERCTXnew.
Affected Software
1 affected component
samsung mTower<=0.3.0
Event History
Sep 5, 2022
CVE Published
via MITRE·03:43 AM
Data Sourced
via MITRE·03:43 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-39829?
CVE-2022-39829 has a medium severity rating due to the potential for a NULL pointer dereference vulnerability.
2
How do I fix CVE-2022-39829?
To fix CVE-2022-39829, ensure that your implementation properly checks the return value of EVP_CIPHER_CTX_new before using it.
3
Which versions of Samsung mTower are affected by CVE-2022-39829?
CVE-2022-39829 affects all versions of Samsung mTower up to and including 0.3.0.
4
What causes the vulnerability in CVE-2022-39829?
The vulnerability in CVE-2022-39829 is caused by a missing check on the return value of the EVP_CIPHER_CTX_new function.
5
What is the impact of CVE-2022-39829?
The impact of CVE-2022-39829 can lead to application crashes due to an unhandled NULL pointer dereference.