CVE-2022-32663

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
MediaTek, Inc.	MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7668, MT7902, MT7915, MT7916, MT7921, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8788	7.6.6.1

References

https://corp.mediatek.com/product-security-bulletin/February-2023Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/February-2023Vendor Advisory

Timeline

Published: Feb 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-326648.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege CVE-2022-326659.8In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no ad CVE-2022-326667.5In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service w CVE-2022-32674.3Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.CVE-2022-32689.8Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.CVE-2022-32699.8Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.CVE-2022-32709.8In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a compl CVE-2022-32727.5Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.CVE-2022-32739.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.CVE-2022-327395.3When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains O CVE-2022-32743.5Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.CVE-2022-327405.3A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circ