GCVE - cpe:2.3:a:samsung:mtower:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:samsung:mtower:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Samsung (`0eb241f7-997b-5d1c-b2a3-00a89e1049d3`)
Product	Mtower (`11bb50d7-ee18-545a-a5c1-af629f368ff4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/samsung/mtower`	purl2cpe	2026-06-01 10:12:49.708742

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-40762`	vulnerable	2026-06-08 05:48:28.084422	Details available A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Realloc with an excessive number for the parameter len. Published: 2022-09-16T21:35:45.000Z Updated: 2024-08-03T12:28:42.627Z Open on db.gcve.eu Reference links https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api.c#L319 https://github.com/Samsung/mTower/issues/82	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40761`	vulnerable	2026-06-08 05:48:28.084145	Details available The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc. Published: 2022-09-16T21:35:50.000Z Updated: 2024-08-03T12:28:41.535Z Open on db.gcve.eu Reference links https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/tee/tee_svc_cryp.c#L1248 https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/tee/tee_obj.c#L109 https://github.com/Samsung/mTower/issues/83	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40760`	vulnerable	2026-06-08 05:48:28.083843	Details available A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpdate with an excessive size value of chunkSize. Published: 2022-09-16T21:36:32.000Z Updated: 2024-08-03T12:28:42.609Z Open on db.gcve.eu Reference links https://github.com/Samsung/mTower/issues/81 https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1188 https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/crypto/libtomcrypt/include/tomcrypt_hash.h#L397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40759`	vulnerable	2026-06-08 05:48:28.083441	Details available A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the parameter operation. Published: 2022-09-16T21:36:38.000Z Updated: 2024-08-03T12:28:42.443Z Open on db.gcve.eu Reference links https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1249 https://github.com/Samsung/mTower/issues/80	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40758`	vulnerable	2026-06-08 05:48:28.083146	Details available A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_CipherUpdate with an excessive size value of srcLen. Published: 2022-09-16T21:36:46.000Z Updated: 2024-08-03T12:28:42.548Z Open on db.gcve.eu Reference links https://github.com/Samsung/mTower/issues/81 https://github.com/Samsung/mTower/blob/efd36709306a9afcca5b4782499d01be0c7a02a5/tee/lib/libutee/tee_api_operations.c#L1224	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40757`	vulnerable	2026-06-08 05:48:28.082771	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39830`	vulnerable	2026-06-08 05:47:18.830745	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39829`	vulnerable	2026-06-08 05:47:18.830347	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39828`	vulnerable	2026-06-08 05:47:18.829929	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38155`	vulnerable	2026-06-08 05:47:15.903183	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36622`	vulnerable	2026-06-08 05:46:07.623498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36621`	vulnerable	2026-06-08 05:46:07.623076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.