[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fppp_XpQTgDa1-dXdjY7tDjIzGjfZSB7PlxAwL9EzK_U":3,"g5a-risk:CVE-2022-40761":103},{"success":4,"data":5,"meta":100},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":52,"weaknesses":53,"weaknessesCount":38,"isActivelyExploited":62,"cisaInfo":26,"otxData":26,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":98,"notableEvents":99},"CVE-2022-40761","What is CVE-2022-40761?","The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.","The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Allo...","2022-09-16T22:15:12.517","2023-08-08T14:22:24.967",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.01682,[29,29,29,29,29,29,29],"High",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"samsung","mtower","*","cpe:2.3:a:samsung:mtower:*:*:*:*:*:*:*:*",1,[40,46,49],{"url":41,"source":42,"tags":43},"https:\u002F\u002Fgithub.com\u002FSamsung\u002FmTower\u002Fblob\u002Fefd36709306a9afcca5b4782499d01be0c7a02a5\u002Ftee\u002Ftee\u002Ftee_obj.c#L109","GitHub",[44,45],"Patch","Third Party Advisory",{"url":47,"source":42,"tags":48},"https:\u002F\u002Fgithub.com\u002FSamsung\u002FmTower\u002Fblob\u002Fefd36709306a9afcca5b4782499d01be0c7a02a5\u002Ftee\u002Ftee\u002Ftee_svc_cryp.c#L1248",[44,45],{"url":50,"source":42,"tags":51},"https:\u002F\u002Fgithub.com\u002FSamsung\u002FmTower\u002Fissues\u002F83",[45],3,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-1284","Improper Validation of Specified Quantity in Input","The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.","Specified quantities include size, length, frequency, price, rate, number of operations, time, and others. Code may rely on specified quantities to allocate resources, perform calculations, control iteration, etc. When the quantity is not properly validated, then attackers can specify malicious quantities to cause excessive resource allocation, trigger unexpected failures, enable buffer overflows, etc.","Incomplete","Base","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2022-40761? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-40761, a high severity cyber security vulnerability from 2022. The function tee_obj_free in Samsung mTower through 0.3.0 a...","CVE-2022-40761, CVE-2022-40761 vulnerability, CVE-2022-40761 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, samsung security, mtower vulnerability","\u002Fwhat-is\u002Fcve-2022-40761",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-40761","Cybersecurity","CVE-2022-40761, CVE-2022-40761 vulnerability, CVE-2022-40761 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":26,"Negate":26,"Nodes":91},[92],{"Operator":93,"Negate":26,"CPEMatch":94},"OR",[95],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":96,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":97},"8C72C53B-9CF2-4F9A-90C1-3A1FE236BA5B","0.3.0",[],[],{"lastModified":11,"cacheTime":101,"version":102},1793222748114,"2.0",{"score":104,"band":105,"action":106,"scoredAt":107},46,"Medium","Plan remediation","2026-10-28T06:55:08.187851+00:00"]