CVE Vulnerability

CVE-2022-36622

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/tee/tee_svc.c#L965 Patch Third Party Advisory
https://github.com/Samsung/mTower Third Party Advisory
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api_objects.c#L84 Patch Third Party Advisory
https://security.samsungmobile.com/securityUpdate.smsb Not Applicable
Configurations

Configuration 1

cpe:2.3:a:samsung:mtower:*:*:*:*:*:*:*:*
Information

Published : 2022-09-01 09:15

Updated : 2022-09-07 01:58

NVD link : CVE-2022-36622

Mitre link : CVE-2022-36622

Products Affected
No products.
CWE
CWE-476