CVE-2022-32628

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310780; Issue ID: ALPS07310780.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326296.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-32637.8The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limitedCVE-2022-326306.7In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation oCVE-2022-326316.7In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SyCVE-2022-326326.7In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SyCVE-2022-326336.7In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System exeCVE-2022-326346.7In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SysCVE-2022-326357.8In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addiCVE-2022-326366.7In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with SysCVE-2022-326376.7In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege witCVE-2022-326386.4In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System executCVE-2022-326394.4In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with Sys
CVE-2022-32628: Medium severity, CVSS 6.7 | Vulnix