CVE-2022-38155: Samsung Mtower

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.

Affected products

• Samsung Mtower: up to and including 0.3.0

Published 2022-08-11. Last modified 2026-06-17.