CVE-2022-38155

TEEMalloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash...

CVE-2022-35858

The TEEPopulateTransientObject and uteefromattr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEEPopulateTransientObject with a large number in the parameter attrCount...

EUVD-2022-40752

Malicious code in bioql PyPI...

EUVD-2022-44024

Malicious code in bioql PyPI...

EUVD-2022-38731

Malicious code in bioql PyPI...

EUVD-2022-39325

Malicious code in bioql PyPI...

EUVD-2022-42273

Malicious code in bioql PyPI...

EUVD-2022-42274

Malicious code in bioql PyPI...

EUVD-2022-44029

Malicious code in bioql PyPI...

EUVD-2022-39326

Malicious code in bioql PyPI...

EUVD-2022-42275

Malicious code in bioql PyPI...

EUVD-2022-44028

Malicious code in bioql PyPI...

EUVD-2022-44027

Malicious code in bioql PyPI...

EUVD-2022-44026

Malicious code in bioql PyPI...

EUVD-2022-44025

Malicious code in bioql PyPI...

CVE-2022-36622

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEEGetObjectInfo1...

CVE-2022-36621

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEEAllocateTransientObject...

CVE-2022-40757

A Buffer Access with Incorrect Length Value vulnerablity in the TEEMACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service DoS by invoking the function TEEMACComputeFinal with an excessive size value of messageLen...

CVE-2022-39830

signpFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of ECKEYsetpublickeyaffinecoordinates, leading to a denial of service...

CVE-2022-39829

There is a NULL pointer dereference in aes256encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVPCIPHERCTXnew...