CVE-2022-26438

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420013; Issue ID: GN20220420013.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264396.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-26449.8A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing oCVE-2022-264406.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264416.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264426.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264436.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264446.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264456.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264467.5In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatCVE-2022-264479.8In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addiCVE-2022-264486.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2022-264496.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst
CVE-2022-26438: Medium severity, CVSS 6.7 | Vulnix