Denial of Service vulnerability in Samsung mTower
CVE-2022-40761

7.5HIGH

Key Information:

Vendor: Samsung
Status: Mtower
Vendor: CVE Published:; 16 September 2022

What is CVE-2022-40761?

The function tee_obj_free in Samsung mTower version 0.3.0 contains a vulnerability that allows a trusted application to instigate a Denial of Service (DoS) attack. This is achieved by invoking the TEE_AllocateOperation function with a malformed heap layout, which is related to utee_cryp_obj_alloc. This situation can lead to unexpected behavior and service unavailability, making it crucial for users to apply the necessary mitigations.