CVE-2022-32624

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405923; Issue ID: ALPS07405923.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326256.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326266.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326286.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-326296.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-32637.8The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limitedCVE-2022-326306.7In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation oCVE-2022-326316.7In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SyCVE-2022-326326.7In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SyCVE-2022-326336.7In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System exeCVE-2022-326346.7In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SysCVE-2022-326357.8In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addiCVE-2022-326366.7In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sys
CVE-2022-32624: Medium severity, CVSS 6.7 | Vulnix