CVE-2022-27567

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	>= Q(10), R(11), S(12), < SMR Apr-2022 Release 1

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4Vendor Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4Vendor Advisory

Timeline

Published: Apr 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-275689.8Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution b CVE-2022-275699.8Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution b CVE-2022-27579.1Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and mo CVE-2022-275709.8Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code exec CVE-2022-275719.8Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code e CVE-2022-275729.8Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution b CVE-2022-275737.2Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Releas CVE-2022-275747.2Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Releas CVE-2022-275753.3Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app infor CVE-2022-275763.3Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app CVE-2022-275779.1The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP CVE-2022-275787.8An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where non authenticated o