CVE-2022-32648

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535964; Issue ID: ALPS06535964.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-662

Affected software

VendorProductVersions
MediaTek, Inc.MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789Android 11.0, 12.0

References

Timeline

Published
Jan 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326496.7In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution priCVE-2022-32655.4A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prioCVE-2022-326506.7In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326516.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326526.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326536.7In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution CVE-2022-326546.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326556.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326566.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326576.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326586.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326596.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wi
CVE-2022-32648: Medium severity, CVSS 6.4 | Vulnix