Buffer Access Vulnerability in Samsung mTower

CVE-2022-40757

Summary

A vulnerability in the TEE_MACComputeFinal function of Samsung mTower can be exploited by trusted applications to induce a Denial of Service (DoS). This occurs when the function is called with an excessively large message length, leading to buffer access issues that may cause unexpected application behavior or crashes. The affected versions include mTower through 0.3.0, highlighting a critical need for updates to mitigate potential risks.

References