There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new.
References
| Link | Resource |
|---|---|
| https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/ecdsa_keygen.c#L135 | Exploit Third Party Advisory |
| https://github.com/Samsung/mTower/issues/75 | Exploit Issue Tracking Third Party Advisory |
| https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_new.html | Third Party Advisory |
| https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/ecdsa_keygen.c#L135 | Exploit Third Party Advisory |
| https://github.com/Samsung/mTower/issues/75 | Exploit Issue Tracking Third Party Advisory |
| https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_new.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/ecdsa_keygen.c#L135 - Exploit, Third Party Advisory | |
| References | () https://github.com/Samsung/mTower/issues/75 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_new.html - Third Party Advisory |
Information
Published : 2022-09-05 04:15
Updated : 2024-11-21 07:18
NVD link : CVE-2022-39829
Mitre link : CVE-2022-39829
CVE.ORG link : CVE-2022-39829
JSON object : View
Products Affected
samsung
- mtower
CWE
CWE-476
NULL Pointer Dereference