CVE-2022-26467

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07167738; Issue ID: ALPS07167738.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264686.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-264697.8In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with noCVE-2022-26479.8A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The maCVE-2022-264706.7In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2022-264717.8In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege CVE-2022-264727.8In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with nCVE-2022-264736.7In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System executCVE-2022-264746.7In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation ofCVE-2022-264756.7In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2022-264768.8A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), SCVE-2022-264777.5The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if taCVE-2022-264799.8An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor
CVE-2022-26467: Medium severity, CVSS 6.7 | Vulnix