Vyond
Monthly
Local, high-privileged attackers can crash the Samsung Vyond TEE monitor by passing an out-of-bounds enclave ID to the Keystone SBI create_enclave path in tee/monitor/src/enclave.rs. The flaw affects all versions before commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa and requires supervisor-mode access (PR:H) with no user interaction; impact is limited to availability (monitor crash/instability) with no confidentiality or integrity effect. No public exploit has been identified, and despite the CVE assignment, this is a genuinely low-priority issue.
Samsung Vyond's RISC-V security monitor aborts with an uncaught Rust panic when its SBI error paths are reached, because pre-fix builds call panic!() instead of returning a structured error code. Exploitation requires an attacker who already executes at RISC-V supervisor (S-mode) privilege and can invoke the monitor's SBI calls (enclave lifecycle or shared-memory region operations) with parameters that drive those functions into an error branch, making this a local, high-privilege, availability-only crash of a TEE security monitor. No public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (CISA KEV); CVSS 3.1 scores it 4.4 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H), with no confidentiality or integrity impact.
Local, high-privileged attackers can crash the Samsung Vyond TEE monitor by passing an out-of-bounds enclave ID to the Keystone SBI create_enclave path in tee/monitor/src/enclave.rs. The flaw affects all versions before commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa and requires supervisor-mode access (PR:H) with no user interaction; impact is limited to availability (monitor crash/instability) with no confidentiality or integrity effect. No public exploit has been identified, and despite the CVE assignment, this is a genuinely low-priority issue.
Samsung Vyond's RISC-V security monitor aborts with an uncaught Rust panic when its SBI error paths are reached, because pre-fix builds call panic!() instead of returning a structured error code. Exploitation requires an attacker who already executes at RISC-V supervisor (S-mode) privilege and can invoke the monitor's SBI calls (enclave lifecycle or shared-memory region operations) with parameters that drive those functions into an error branch, making this a local, high-privilege, availability-only crash of a TEE security monitor. No public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (CISA KEV); CVSS 3.1 scores it 4.4 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H), with no confidentiality or integrity impact.