CVE-2022-27834

State: Published
Severity: 2.9 Low
Published: Apr 11, 2022
Updated: Aug 3, 2024
Reserved: Mar 24, 2022

Description

Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.

Scores

CVSS	Score	Vector	Source
3.1	2.9 Low	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	Samsung Mobile

Weaknesses

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

Product	Versions
Samsung Mobile DevicesSamsung Mobile	Q(10), R(11), S(12) devices with Exynos 2100, 9830, 980 chipsets to before SMR Apr-2022 Release 1Affected

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.