CVE-2022-32656

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
MediaTek, Inc.	MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385	7.6.6.0

References

https://corp.mediatek.com/product-security-bulletin/February-2023Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/February-2023Vendor Advisory

Timeline

Published: Feb 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-326576.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wi CVE-2022-326586.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wi CVE-2022-326596.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wi CVE-2022-32665.5An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects Firefo CVE-2022-326637.5In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no addit CVE-2022-326648.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege CVE-2022-326659.8In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no ad CVE-2022-326667.5In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service w CVE-2022-32674.3Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.CVE-2022-32689.8Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.CVE-2022-32699.8Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.CVE-2022-32709.8In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a compl