PT-2022-25036 · Unknown · Nfc Driver

Dzmitry Lukyanenka · Published 2022-10-07 · Updated 2022-10-11 · CVE-2022-39847

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions NFC driver versions prior to SMR Oct-2022 Release 1

Description The issue is related to a use after free vulnerability in the set nft pid and signal handler function of the NFC driver. This vulnerability allows attackers to perform malicious actions.

Recommendations For NFC driver versions prior to SMR Oct-2022 Release 1, consider disabling the set nft pid and signal handler functions until a patch is available. As a temporary workaround, restrict access to the NFC driver to minimize the risk of exploitation.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-39847

Affected Products

Nfc Driver

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39847 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39847 · Vendor Advisory
• https://t.me/cibsecurity/50970 · Telegram Post