4.4
Medium
CVE-2022-28793 Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to…
Description
Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Mobile Devices | Versions not published |
Other CVEs of Samsung Mobile Devices
The 866 CVEs of Samsung Mobile Devices →
CVE-2026-21126
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
6.9
Medium
CVE-2026-21125
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
8.6
High
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
8.6
High
CVE-2026-21123
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with…
6.7
Medium