Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-22271 EUVD-2022-27418GHSA-mjgc-6w7g-2jm9

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary…

Published Jan 7, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices P(9.0), Q(10.0), R(11.0) – < SMR Jan-2022 Release 1 SMR Jan-2022 Release 1

References