CVE-2022-38155

Name of the Vulnerable Software and Affected Versions Samsung mTower versions 0.3.0 and earlier

Description The issue allows a trusted application to achieve excessive memory allocation via a large len value, potentially leading to a kernel crash, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.

Recommendations For Samsung mTower versions 0.3.0 and earlier, consider restricting the len value to prevent excessive memory allocation until a patch is available. As a temporary workaround, restrict access to the TEE Malloc function to minimize the risk of exploitation.