7.5

CVE-2022-40278

Exploit

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to a denial of service.

Data is provided by the National Vulnerability Database (NVD)
Samsung ≫ Tizenrt Version1.0 Updatem1
Samsung ≫ Tizenrt Version1.1
Samsung ≫ Tizenrt Version2.0 Updategbm_m1
Samsung ≫ Tizenrt Version2.0 Updatem2
Samsung ≫ Tizenrt Version3.0 Updategbm
Samsung ≫ Tizenrt Version3.1 Updatepre
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.79% 0.731
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://github.com/Samsung/TizenRT/issues/5628
Third Party Advisory
Issue Tracking
https://www.sqlite.org/c3ref/exec.html
Third Party Advisory
Technical Description