564 matches found
SAMSUNG mTower 缓冲区错误漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower versions prior to 0.3.0, which stems from an "incorrect length buffer access" vulnerability in the TEECipherUpdate function that could allow a trusted application ...
CVE-2022-26454
In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06664701; Issue ID: ALPS06664701...
SAMSUNG mTower 安全漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower 0.3.0 and earlier versions, which stems from a denial of service due to a lack of checking of the ECKEYsetprivatekey return value in signpFwInfo...
SAMSUNG mTower 代码问题漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower v0.3.0 and earlier versions, which originates from the inclusion of a NULL pointer dereference via the TEEGetObjectInfo1 function...
PT-2022-23515 · Samsung · Mtower
Name of the Vulnerable Software and Affected Versions: Samsung Electronics mTower versions 0.3.0 and earlier Description: The issue is related to a NULL pointer dereference via the function TEE GetObjectInfo1. This indicates a problem where the software attempts to access memory through a null, o...
SAMSUNG mTower 代码问题漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower version v0.3.0 and prior versions, which originates from the discovery of a NULL pointer dereference via the function TEEAllocateTransientObject...
CVE-2022-38155
TEEMalloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash...
SAMSUNG mTower 安全漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower version 0.3.0 and prior versions, which stems from a TEEMalloc that allows a trusted application to over-allocate memory by using large len values...
SAMSUNG mTower 安全漏洞
SAMSUNG mTower is a new Trusted Execution Environment TEE from Samsung South Korea. A security vulnerability exists in SAMSUNG mTower version 0.3.0, which stems from the TEEPopulateTransientObject and uteefromattr functions that allow a trusted application to call the function...
CVE-2022-21773
In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; Issue ID: ALPS06641388...
The vulnerability of the monitoring program between the container manager and the execution environment is related to uncontrolled resource consumption, allowing a perpetrator to cause service interruptions.
The vulnerability of the communication monitoring program between the container manager and the execution environment is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions by sending a...
Malicious Package
Overview iframe-execution-environment is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
Malicious code in iframe-execution-environment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878f55d0b4e72532f2d5aea14715b24e3806715e018b96a235230768b24a79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3788 Malicious code in iframe-execution-environment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878f55d0b4e72532f2d5aea14715b24e3806715e018b96a235230768b24a79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: use-after-free in the TEE subsystem
A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...
kernel: use-after-free in the TEE subsystem
A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...
CVE-2022-28793
Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time...
Samsung Galaxy S3 代码问题漏洞
Samsung Galaxy S22 is a smartphone product released on February 9, 2022 by Samsung. The Samsung Galaxy S22 StrongBox suffers from a State Maintenance Error vulnerability that stems from incorrect StrongBox state maintenance. An attacker can exploit the vulnerability to change the Android ROT duri...
Ubuntu: Security Advisory (USN-5377-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...