🚨 CVE-2026-10420
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.
🎖@cveNotify
GitHub
fix: Validate TA-supplied pointers in secure-kernel syscalls by bmolodan · Pull Request #252 · Samsung/mTower
The copy helpers tee_svc_copy_to_user/tee_svc_copy_from_user and the live crypto syscalls (utee_hash_update/final, utee_cipher_init, cipher update, copy_in_attrs) dereferenced or memcpy'd T...
September 1, 2026 3
