CVE-2022-32655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-32655
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://corp.mediatek.com/product-security-bulletin/February-2023 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:mediatek:mt5221_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:mediatek:mt7603_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7603:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:mediatek:mt7613_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7613:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:mediatek:mt7615_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:mediatek:mt7622_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:mediatek:mt7628_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7628:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:mediatek:mt7629_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7629:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:mediatek:mt7663_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:mediatek:mt7668_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:mediatek:mt7682_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7682:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:mediatek:mt7686_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7686:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:mediatek:mt7687_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7687:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:mediatek:mt7697_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7697:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:mediatek:mt7902_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:mediatek:mt7915_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:mediatek:mt7916_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:mediatek:mt7921_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:mediatek:mt7933_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:mediatek:mt7981_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:mediatek:mt7986_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:mediatek:mt8167s_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:mediatek:mt8175_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:mediatek:mt8362a_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:mediatek:mt8365_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:mediatek:mt8385_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:mediatek:mt8518s_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:mediatek:mt8532_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:mediatek:mt8695_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:mediatek:mt8696_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:mediatek:mt8788_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*
History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-20 CWE-755

14 Feb 2023, 02:27

Type Values Removed Values Added
References (MISC) https://corp.mediatek.com/product-security-bulletin/February-2023 - (MISC) https://corp.mediatek.com/product-security-bulletin/February-2023 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.7
CWE CWE-20
First Time Mediatek mt7933 Firmware
Mediatek mt7603
Mediatek mt7628 Firmware
Mediatek mt7916
Mediatek mt8518s Firmware
Mediatek mt8175
Mediatek mt8532 Firmware
Mediatek mt7902
Mediatek mt7933
Mediatek mt7687 Firmware
Mediatek mt8365
Mediatek mt7682
Mediatek mt5221 Firmware
Mediatek mt5221
Mediatek mt7622
Mediatek mt7686
Mediatek mt8175 Firmware
Mediatek mt8696
Mediatek mt8385 Firmware
Mediatek mt7613
Mediatek mt8365 Firmware
Mediatek mt7915 Firmware
Mediatek mt7986
Mediatek mt7668 Firmware
Mediatek mt8696 Firmware
Mediatek mt8532
Mediatek mt7615
Mediatek mt7686 Firmware
Mediatek mt7697 Firmware
Mediatek mt7981
Mediatek mt7921 Firmware
Mediatek mt7697
Mediatek mt8695 Firmware
Mediatek mt8788
Mediatek mt7916 Firmware
Mediatek mt7622 Firmware
Mediatek mt8695
Mediatek mt8167s
Mediatek mt8362a Firmware
Mediatek mt7629 Firmware
Mediatek mt7981 Firmware
Mediatek mt7663 Firmware
Mediatek mt7915
Mediatek mt7628
Mediatek mt7986 Firmware
Mediatek mt7668
Mediatek mt8385
Mediatek mt7603 Firmware
Mediatek mt7663
Mediatek mt7615 Firmware
Mediatek
Mediatek mt7629
Mediatek mt7613 Firmware
Mediatek mt8362a
Mediatek mt8518s
Mediatek mt8167s Firmware
Mediatek mt7687
Mediatek mt7921
Mediatek mt7902 Firmware
Mediatek mt7682 Firmware
Mediatek mt8788 Firmware
CPE cpe:2.3:o:mediatek:mt8788_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8385_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7916_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7687:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7697_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7613_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7629_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7663_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7981_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7613:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7687_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7629:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8695_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8532_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7933_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8518s_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8175_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7668_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8696_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7603:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7682:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8167s_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7902_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8365_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7915_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt5221_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7697:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7986_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7682_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8362a_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7921_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7615_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7686_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7622_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7686:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7628_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt7603_firmware:7.6.6.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7628:-:*:*:*:*:*:*:*

06 Feb 2023, 20:36

Type Values Removed Values Added
New CVE
Information

Published : 2023-02-06 20:15

Updated : 2023-12-10 14:48

NVD link : CVE-2022-32655

Mitre link : CVE-2022-32655

CVE.ORG link : CVE-2022-32655

JSON object : View

Products Affected

mediatek

  • mt7902
  • mt8167s_firmware
  • mt7663
  • mt7915_firmware
  • mt8788
  • mt7629
  • mt8696_firmware
  • mt7687
  • mt8788_firmware
  • mt7613_firmware
  • mt7668
  • mt7686_firmware
  • mt7622
  • mt8167s
  • mt7697_firmware
  • mt5221
  • mt7986
  • mt7981
  • mt7916_firmware
  • mt7615_firmware
  • mt8532_firmware
  • mt7622_firmware
  • mt8532
  • mt7603
  • mt8518s_firmware
  • mt7915
  • mt7668_firmware
  • mt7682_firmware
  • mt7682
  • mt7916
  • mt7615
  • mt8175
  • mt7628_firmware
  • mt5221_firmware
  • mt7921
  • mt7981_firmware
  • mt8365_firmware
  • mt7902_firmware
  • mt8695_firmware
  • mt8365
  • mt8385
  • mt7663_firmware
  • mt8518s
  • mt8696
  • mt7986_firmware
  • mt7921_firmware
  • mt8362a
  • mt8362a_firmware
  • mt7687_firmware
  • mt7613
  • mt7628
  • mt8695
  • mt8385_firmware
  • mt8175_firmware
  • mt7686
  • mt7933
  • mt7933_firmware
  • mt7697
  • mt7603_firmware
  • mt7629_firmware
CWE
CWE-755

Improper Handling of Exceptional Conditions