CVE-2022-35858

The TEEPopulateTransientObject and uteefromattr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEEPopulateTransientObject with a large number in the parameter attrCount...

Information disclosure

The TEEPopulateTransientObject and uteefromattr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEEPopulateTransientObject with a large number in the parameter attrCount...

CVE-2022-35858

The Samsung mTower vulnerability CVE-2022-35858 affects version 0.3.0, where the functions TEE_PopulateTransientObject and __utee_from_attr can be triggered to overwrite memory, cause a denial of service, and disclose information when attrCount is large. The issue is documented across multiple so...

CVE-2022-35858: Missing Release of Memory after Effective Lifetime

The TEEPopulateTransientObject and uteefromattr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEEPopulateTransientObject with a large number in the parameter attrCount...