CVE-2022-32645 : In vow, there is a possible information disclosure due to a race condition. This

In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494477; Issue ID: ALPS07494477.

Published 2023-01-03 21:15:12

Updated 2025-04-10 16:15:19

Source MediaTek, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2022-32645

Google » Android » Version: 11.0
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6789 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
When used together with: Mediatek » Mt8791 » Version: N/A
When used together with: Mediatek » Mt8791t » Version: N/A
When used together with: Mediatek » Mt8797 » Version: N/A
Google » Android » Version: 12.0
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6789 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
When used together with: Mediatek » Mt8791 » Version: N/A
When used together with: Mediatek » Mt8791t » Version: N/A
When used together with: Mediatek » Mt8797 » Version: N/A
Google » Android » Version: 13.0
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6789 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
When used together with: Mediatek » Mt8791 » Version: N/A
When used together with: Mediatek » Mt8791t » Version: N/A
When used together with: Mediatek » Mt8797 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-32645

EPSS FAQ

0.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 3 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-32645

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.1	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N	0.5	3.6	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-04-10
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
4.1	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N	0.5	3.6	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2022-32645

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
CWE-662 Improper Synchronization

The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-32645

https://corp.mediatek.com/product-security-bulletin/January-2023

January 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-32645

Products affected by CVE-2022-32645

Exploit prediction scoring system (EPSS) score for CVE-2022-32645

CVSS scores for CVE-2022-32645

CWE ids for CVE-2022-32645

References for CVE-2022-32645