C01Dkitop

**Name of the Vulnerable Software and Affected Versions** Samsung mTower versions 0.3.0 and earlier **Description** A NULL pointer dereference issue in the `TEE MACCompareFinal` function allows a trusted application to trigger a Denial of Service (DoS) by invoking the `TEE MACCompareFinal` function with a NULL pointer for the parameter `operation`. **Recommendations** For Samsung mTower versions 0.3.0 and earlier, as a temporary workaround, consider restricting access to the `TEE MACCompareFinal` function to minimize the risk of exploitation. Avoid using the `operation` parameter with a NULL value in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung mTower versions 0.3.0 and earlier **Description** A Memory Allocation with Excessive Size Value issue in the TEE Realloc function allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE Realloc with an excessive number for the parameter `len`. **Recommendations** For Samsung mTower versions 0.3.0 and earlier, as a temporary workaround, consider restricting the use of the TEE Realloc function with large `len` values until a patch is available.