CVE-2022-32656 : In Wi-Fi driver, there is a possible undefined behavior due to incorrect error h

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

Published 2023-02-06 20:15:11

Updated 2023-02-14 18:53:42

Source MediaTek, Inc.

View at NVD, CVE.org

Products affected by CVE-2022-32656

Mediatek » Mt7613 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7613_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7613 » Version: N/A
Mediatek » Mt7615 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7615_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7615 » Version: N/A
Mediatek » Mt7622 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7622_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7622 » Version: N/A
Mediatek » Mt7628 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7628_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7628 » Version: N/A
Mediatek » Mt7629 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7629_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7629 » Version: N/A
Mediatek » Mt7915 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7915_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7915 » Version: N/A
Mediatek » Mt7603 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7603_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7603 » Version: N/A
Mediatek » Mt7916 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7916_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7916 » Version: N/A
Mediatek » Mt7986 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7986_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7986 » Version: N/A
Mediatek » Mt7981 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7981_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7981 » Version: N/A
Mediatek » Mt8518s Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8518s_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8518s » Version: N/A
Mediatek » Mt8532 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8532_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8532 » Version: N/A
Mediatek » Mt5221 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt5221_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt5221 » Version: N/A
Mediatek » Mt7668 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7668_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7668 » Version: N/A
Mediatek » Mt7902 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7902_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7902 » Version: N/A
Mediatek » Mt7921 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7921_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7921 » Version: N/A
Mediatek » Mt8167s Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8167s_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8167s » Version: N/A
Mediatek » Mt8175 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8175_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8175 » Version: N/A
Mediatek » Mt8362a Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8362a_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8362a » Version: N/A
Mediatek » Mt8365 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8365_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8365 » Version: N/A
Mediatek » Mt8385 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8385_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8385 » Version: N/A
Mediatek » Mt8788 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8788_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8788 » Version: N/A
Mediatek » Mt7663 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7663_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7663 » Version: N/A
Mediatek » Mt7682 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7682_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7682 » Version: N/A
Mediatek » Mt7686 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7686_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7686 » Version: N/A
Mediatek » Mt7687 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7687_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7687 » Version: N/A
Mediatek » Mt7697 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7697_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7697 » Version: N/A
Mediatek » Mt7933 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7933_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7933 » Version: N/A
Mediatek » Mt8695 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8695_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8695 » Version: N/A
Mediatek » Mt8696 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8696_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8696 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-32656

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-32656

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2022-32656

https://corp.mediatek.com/product-security-bulletin/February-2023

February 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-32656

Products affected by CVE-2022-32656

Exploit prediction scoring system (EPSS) score for CVE-2022-32656

CVSS scores for CVE-2022-32656

References for CVE-2022-32656