CVE-2022-32590

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-754

Affected software

VendorProductVersions
MediaTek, Inc.MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7663, MT7668,Android 11.0, 12.0 and Yocto 3.1, 3.3

References

Timeline

Published
Oct 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-325917.5In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional exCVE-2022-325926.7In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SyCVE-2022-325936.7In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2022-325946.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325954.4In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SCVE-2022-325966.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325976.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325986.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325996.7In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System executioCVE-2022-32604.8The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these CVE-2022-326017.8In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with nCVE-2022-326025.5In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no
CVE-2022-32590: Medium severity, CVSS 6.7 | Vulnix