CVE-2022-22271 — A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory

MEDIUM

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory

Published Jan 7, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.11%

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
P(9.0), Q(10.0), R(11.0)	affected	<SMR Jan-2022 Release 1

No remediation recorded yet.

0.11% 0.00110

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00110

2022–2026

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.11% (0.00110)	1.17th	v5 (v2026.06.15)
Jun 15, 2026	0.11% (0.00110)	1.52th	v5 (v2026.06.15)
Mar 17, 2025	0.04% (0.00041)	9.74th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	14.58th	v3 (v2023.03.01)
Jun 3, 2024	0.04% (0.00044)	12.34th	v3 (v2023.03.01)
Jul 31, 2023	0.04% (0.00044)	10.33th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00043)	6.97th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00885)	26.24th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00885)	24.24th	v2 (v2022.01.01)
Feb 8, 2022	0.89% (0.00885)	10.79th	v2 (v2022.01.01)