CVE-2022-32647

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554646; Issue ID: ALPS07554646.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326486.4In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution CVE-2022-326496.7In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution priCVE-2022-32655.4A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prioCVE-2022-326506.7In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326516.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326526.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326536.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326546.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326556.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326566.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326576.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326586.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wi
CVE-2022-32647: Medium severity, CVSS 6.7 | Vulnix