CVE-2022-32618

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262454; Issue ID: ALPS07262454.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326196.7In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wiCVE-2022-32628.1A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. ThCVE-2022-326206.7In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution pCVE-2022-326216.4In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System executCVE-2022-326226.7In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System exeCVE-2022-326236.7In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with SysteCVE-2022-326246.7In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation oCVE-2022-326256.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326266.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326286.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-326296.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-32637.8The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited
CVE-2022-32618: Medium severity, CVSS 6.8 | Vulnix