Samsung Tizenrt vulnerabilities

5 CVEs affecting Samsung Tizenrt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40279, published 2022-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-40278, published 2022-09-29. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to…
CVE-2022-40279, published 2022-09-29. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c has a missing check on the return value of…
CVE-2022-40280, published 2022-09-08. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2,…
CVE-2021-22684, published 2021-08-31. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected…
CVE-2022-40281, published 2022-09-08. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SSL_get_peer_certificate, leading to information…