As a part of the KNOX extensions available on Samsung devices, Samsung provides a TrustZone trustlet which allows the generation of OTP tokens. The OTP TrustZone trustlet suffers from a stack buffer overflow.
d251f615016ad2f13d1ac6b46b510c797add40d6d16be9da1091512713543876