CVE-2022-32654

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MediaTek, Inc.MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT83857.6.6.0

References

Timeline

Published
Feb 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326556.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326566.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326576.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326586.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-326596.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiCVE-2022-32665.5An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects FirefoCVE-2022-326637.5In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additCVE-2022-326648.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilegeCVE-2022-326659.8In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no adCVE-2022-326667.5In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service wCVE-2022-32674.3Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.CVE-2022-32689.8Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.
CVE-2022-32654: Medium severity, CVSS 6.7 | Vulnix