CVE-2022-40761

The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.

The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.

La función tee_obj_free en Samsung mTower versiones hasta 0.3.0, permite que una aplicación confiable desencadene una denegación de servicio (DoS) al invocar la función TEE_AllocateOperation con una disposición de la pila alterada, relacionada con utee_cryp_obj_alloc