CVE-2022-40759: Null Pointer Dereference
Published Sep 16, 2022
·Updated
A NULL pointer dereference issue in the TEEMACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEEMACCompareFinal with a NULL pointer for the parameter operation.
Affected Software
1 affected component
samsung mTower<=0.3.0
Remediation
Event History
Sep 16, 2022
CVE Published
via MITRE·09:36 PM
Data Sourced
via MITRE·09:36 PM
Description
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-40759?
CVE-2022-40759 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2022-40759?
To fix CVE-2022-40759, ensure you update to a version of Samsung mTower newer than 0.3.0.
3
What does CVE-2022-40759 affect?
CVE-2022-40759 affects Samsung mTower versions up to and including 0.3.0.
4
Can CVE-2022-40759 be exploited remotely?
Yes, CVE-2022-40759 can be exploited by invoking the vulnerable function with a NULL pointer.
5
What happens when CVE-2022-40759 is exploited?
Exploitation of CVE-2022-40759 can lead to a Denial of Service, causing the application to crash.