exploitDog

CVE-2022-36622

Опубликовано: 01 сент. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1.

Ссылки

https://github.com/Samsung/mTower
Third Party Advisory
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api_objects.c#L84
Patch
Third Party Advisory
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/tee/tee_svc.c#L965
Patch
Third Party Advisory
https://security.samsungmobile.com/securityUpdate.smsb
Not Applicable
https://github.com/Samsung/mTower
Third Party Advisory
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api_objects.c#L84
Patch
Third Party Advisory
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/tee/tee_svc.c#L965
Patch
Third Party Advisory
https://security.samsungmobile.com/securityUpdate.smsb
Not Applicable

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:samsung:mtower:*:*:*:*:*:*:*:*

Версия до 0.3.0 (включая)

EPSS

Процентиль: 70%

0.0064

Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

GHSA-q992-g8ch-j442

CVSS3: 7.5

github

больше 3 лет назад

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1.

EPSS

Процентиль: 70%

0.0064

Низкий

7.5 High

CVSS3

Дефекты

CWE-476