CVE-2022-27813

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the firmwares, an adversary with control over either core can trivially gain code execution on the other, by overwriting code located in shared RAM or DDR2 memory regions.

• CWE-1260

• https://tetraburst.com/Technical Description
• https://tetraburst.com/Technical Description

Published

Oct 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27807Improper input validation vulnerability in Link of Cybozu Ga…4.3
• CVE-2022-27808Insufficient control flow management in some Intel(R) Ethern…7.8
• CVE-2022-2781In affected versions of Octopus Server it was identified tha…5.3
• CVE-2022-27810It was possible to trigger an infinite recursion condition i…7.5
• CVE-2022-27811GNOME OCRFeeder before 0.8.4 allows OS command injection via…9.8
• CVE-2022-27812Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.…7.5
• CVE-2022-27814SWHKD 1.1.5 allows arbitrary file-existence tests via the -c…3.3
• CVE-2022-27815SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There…7.8
• CVE-2022-27816SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There…7.1
• CVE-2022-27817SWHKD 1.1.5 consumes the keyboard events of unintended users…4.4
• CVE-2022-27818SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. Ther…9.1
• CVE-2022-27819SWHKD 1.1.5 allows unsafe parsing via the -c option. An info…5.3