Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-40724 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-04T14:48:33.050Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:C) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-352 Description: The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.pingidentity.com/r/en-us/pingfederate-110/fll1675188537050
CVE ID: CVE-2022-40725 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-04T14:47:46.579Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Ping Identity Products: PingID Desktop for Windows, PingID Desktop for macOS Problem Types: CWE-288 Description: PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4
CVE ID: CVE-2022-40732 State: PUBLISHED Published: 2024-12-18T22:34:10.246Z Last Updated: 2024-12-20T17:22:05.281Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Microsoft Products: Windows Problem Types: CWE-476 Description: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
can run specially-crafted code to trigger Denial Of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1514
CVE ID: CVE-2022-40733 State: PUBLISHED Published: 2024-12-18T22:35:34.539Z Last Updated: 2024-12-20T17:22:31.797Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Microsoft Products: Windows Problem Types: CWE-476 Description: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
can run specially-crafted code to trigger Denial Of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1515
CVE ID: CVE-2022-40734 State: PUBLISHED Published: 2022-09-14T00:00:00 Last Updated: 2024-08-03T12:21:46.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UniSharp/laravel-filemanager/issues/1150 - https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment-1320186966 - https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment-182531041
issues/1150#issuecomment-1320186966 - https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment-1825310417
CVE ID: CVE-2022-40735 State: PUBLISHED Published: 2022-11-14T00:00:00 Last Updated: 2024-08-03T12:28:41.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are n
002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mozilla/ssl-config-generator/issues/162 - https://gist.git
es: - CVE Program Container: References: - https://github.com/mozilla/ssl-config-generator/issues/162 - https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b - https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf - https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol/links/546c144f0cf20dedafd53e7e/Security-Issues-in-the-Diffie-Hellman-Key-Agreement-Protocol.pdf - https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf - https://www.rfc-editor.org/rfc/rfc4419 - https://www.rfc-editor.org/rfc/rfc5114#section-4 - https://www.rfc-editor.org/rfc/rfc7919#section-5.2 - htt
fc/rfc4419 - https://www.rfc-editor.org/rfc/rfc5114#section-4 - https://www.rfc-editor.org/rfc/rfc7919#section-5.2 - https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.json - https://www.rfc-editor.org/rfc/rfc3526 - https://dheatattack.gitlab.io/ - https://ieeexplore.ieee.org/document/10374117
CVE ID: CVE-2022-40736 State: PUBLISHED Published: 2022-09-15T03:22:52 Last Updated: 2024-08-03T12:28:41.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4CttsAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/755
CVE ID: CVE-2022-40737 State: PUBLISHED Published: 2022-09-15T03:22:42 Last Updated: 2024-08-03T12:28:41.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4_ByteStream::Write and AP4_HdlrAtom::WriteFields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/756
CVE ID: CVE-2022-40738 State: PUBLISHED Published: 2022-09-15T03:23:01 Last Updated: 2024-08-03T12:28:41.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/756
CVE ID: CVE-2022-40739 State: PUBLISHED Published: 2022-10-31T06:40:40.592Z Last Updated: 2025-05-06T19:27:19.828Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Ragic, Inc. Products: Ragic Problem Types: CWE-79 Description: Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform XSS (Reflected Cross-Site Scripting) attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6645-77bf8-1.html
CVE ID: CVE-2022-40740 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T18:01:11.936Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Realtek Products: GPON router Problem Types: CWE-78 Description: Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6831-19121-1.html
CVE ID: CVE-2022-40741 State: PUBLISHED Published: 2022-10-31T06:40:41.572Z Last Updated: 2025-05-06T19:27:58.185Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SOFTNEXT TECHNOLOGIES CORP. Products: Mail SQR Expert Problem Types: CWE-78 Description: Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html
CVE ID: CVE-2022-40742 State: PUBLISHED Published: 2022-10-31T06:40:42.545Z Last Updated: 2025-05-05T15:30:22.520Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: SOFTNEXT TECHNOLOGIES CORP. Products: Mail SQR Expert Problem Types: CWE-noinfo Description: Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twc
availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html
CVE ID: CVE-2022-40743 State: PUBLISHED Published: 2022-12-19T11:06:14.186Z Last Updated: 2025-04-17T14:19:43.233Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-79 Description: Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0.0 to 9.1.3. Users should upgrade to 9.1.4 or later versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02
CVE ID: CVE-2022-40744 State: PUBLISHED Published: 2024-02-02T03:08:11.780Z Last Updated: 2024-08-03T12:28:41.514Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-79 Description: IBM Aspera Faspex 5.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236441. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7111778 - https://excha
ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7111778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236441
CVE ID: CVE-2022-40745 State: PUBLISHED Published: 2024-04-19T17:01:38.927Z Last Updated: 2024-08-03T12:28:42.305Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-326 Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236452
CVE ID: CVE-2022-40746 State: PUBLISHED Published: 2022-11-21T17:53:45.694Z Last Updated: 2025-04-24T19:08:58.993Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-77 Description: IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
e on the system. IBM X-Force ID: 236581. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6840359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236581
CVE ID: CVE-2022-40747 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:32:31.738Z Vendors: n/a Products: IBM InfoSphere Information Server Problem Types: XML External Entity Injection Description: "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6829373
CVE ID: CVE-2022-40748 State: PUBLISHED Published: 2022-09-23T17:35:16.953Z Last Updated: 2025-05-22T15:03:53.067Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/C:L/A:N/PR:L/I:L/S:C/UI:R/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236586. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ww
X-Force ID: 236586. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6695961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236586
CVE ID: CVE-2022-40750 State: PUBLISHED Published: 2022-11-11T18:21:09.644Z Last Updated: 2025-05-01T13:40:32.850Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-79 Description: IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/page
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236588
CVE ID: CVE-2022-40751 State: PUBLISHED Published: 2022-11-17T16:36:14.175Z Last Updated: 2025-04-29T14:45:44.367Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: UrbanCode Deploy Problem Types: CWE-522 Description: IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
s. IBM X-Force ID: 236601. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6831907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236601
CVE ID: CVE-2022-40752 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-07-23T20:45:00.000Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: InfoSphere DataStage Problem Types: CWE-77 Description: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6833566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236687
CVE ID: CVE-2022-40753 State: PUBLISHED Published: 2022-11-11T18:52:26.588Z Last Updated: 2025-05-01T13:26:48.841Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6830015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/236688
CVE ID: CVE-2022-40754 State: PUBLISHED Published: 2022-09-21T07:25:12.000Z Last Updated: 2025-05-27T18:20:58.998Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-601 Description: In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/26409 - https://lists.apache.org/thread/cn098dcp5x3c402xrb06p3l7nz5goffm
CVE ID: CVE-2022-40755 State: PUBLISHED Published: 2022-09-16T20:16:58 Last Updated: 2024-08-03T12:28:41.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jasper-software/jasper/issues/338
CVE ID: CVE-2022-40756 State: PUBLISHED Published: 2022-09-30T18:15:21.000Z Last Updated: 2025-05-20T15:57:25.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.actian.com/support-services/ - https://actian.my.salesforce.com/sfc/p/
CISA ADP Vulnrichment: References: - https://www.actian.com/support-services/ - https://actian.my.salesforce.com/sfc/p/#300000001XnW/a/4y000000LhjZ/s7Hk0dFM1Z9nLuAPa50rMaZie7mqCR5u33NZFbdKT7Q
CVE ID: CVE-2022-40757 State: PUBLISHED Published: 2022-09-16T21:36:51 Last Updated: 2024-08-03T12:28:42.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACComputeFinal with an excessive size value of messageLen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1031 - https://github.com/Samsung/mTower/issues/81
CVE ID: CVE-2022-40758 State: PUBLISHED Published: 2022-09-16T21:36:46 Last Updated: 2024-08-03T12:28:42.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_CipherUpdate with an excessive size value of srcLen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samsung/mTower/issues/81 - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1224
CVE ID: CVE-2022-40759 State: PUBLISHED Published: 2022-09-16T21:36:38 Last Updated: 2024-08-03T12:28:42.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the parameter operation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1249 - https://github.com/Samsung/mTower/issues/80
CVE ID: CVE-2022-40760 State: PUBLISHED Published: 2022-09-16T21:36:32 Last Updated: 2024-08-03T12:28:42.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpdate with an excessive size value of chunkSize. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samsung/mTower/issues/81 - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1188 - https://github.com/Samsung/m
/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1188 - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/crypto/libtomcrypt/include/tomcrypt_hash.h#L397
CVE ID: CVE-2022-40761 State: PUBLISHED Published: 2022-09-16T21:35:50 Last Updated: 2024-08-03T12:28:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/tee/tee_svc_cryp.c#L1248 - https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/tee/tee_obj.c#L109 - https://github.co
tps://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/tee/tee_obj.c#L109 - https://github.com/Samsung/mTower/issues/83