CVE-2022-40758: Buffer Overflow
A Buffer Access with Incorrect Length Value vulnerablity in the TEECipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEECipherUpdate with an excessive size value of srcLen.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40758?
CVE-2022-40758 has a severity rating that allows a trusted application to trigger a Denial of Service condition.
How do I fix CVE-2022-40758?
To fix CVE-2022-40758, ensure you update Samsung mTower to a version later than 0.3.0.
Who is affected by CVE-2022-40758?
CVE-2022-40758 affects users of Samsung mTower version 0.3.0 and older.
What type of vulnerability is CVE-2022-40758?
CVE-2022-40758 is categorized as a Buffer Access with Incorrect Length Value vulnerability.
What is the impact of CVE-2022-40758?
The impact of CVE-2022-40758 is the potential for a Denial of Service caused by excessive size values in the TEE_CipherUpdate function.