CVE-2022-40762: High severity samsung mTower vulnerability
A Memory Allocation with Excessive Size Value vulnerablity in the TEERealloc function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEERealloc with an excessive number for the parameter len.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-40762.
What is the severity level of CVE-2022-40762?
CVE-2022-40762 has a severity level of high.
What is the affected software?
The affected software is Samsung mTower version up to and including 0.3.0.
How can this vulnerability be exploited?
This vulnerability can be exploited by a trusted application invoking the TEE_Realloc function with an excessive value for the parameter len, leading to a Denial of Service (DoS) attack.
Are there any known fixes or patches for this vulnerability?
At the moment, there is no information available regarding fixes or patches for this vulnerability. It is recommended to monitor the official Samsung mTower repository or contact Samsung for updates.