QwikSec

Security Database

CVE

CWE

Training

CVE-2022-40760

Published: Sep 16, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpdate with an excessive size value of chunkSize.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/Samsung/mTower/issues/81

x_refsource_MISC

https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1188

x_refsource_MISC

https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/crypto/libtomcrypt/include/tomcrypt_hash.h#L397

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2022-40760 - Security Vulnerability | QwikSec