PT-2025-4185 · Unknown · Mpos Tui Trustlet
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
mPOS TUI trustlet versions prior to SMR Feb-2025 Release 1
Description
The issue allows local privileged attackers to cause memory corruption due to an out-of-bounds write in the mPOS TUI trustlet. This can be exploited by attackers with local privileges.
Recommendations
For versions prior to SMR Feb-2025 Release 1, update to SMR Feb-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the mPOS TUI trustlet to minimize the risk of exploitation.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mpos Tui Trustlet