Skip to content
OpenAdvisories
High · 8.2 CVE-2023-21499 EUVD-2023-25667GHSA-q68g-6c66-rcjx

Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local at…

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Description

Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Select Android 13 devices – < SMR May-2023 Release 1 SMR May-2023 Release 1

Advisories 1

References