CVE-2022-32659 : In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066.

Published 2023-01-03 21:15:13

Updated 2023-01-10 03:34:53

Source MediaTek, Inc.

View at NVD, CVE.org

Vulnerability category: Input validation

Exploit prediction scoring system (EPSS) score for CVE-2022-32659

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-32659

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-32659

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2022-32659

Mediatek » Mt7613 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7613_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7613 » Version: N/A
Mediatek » Mt7615 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7615_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7615 » Version: N/A
Mediatek » Mt7622 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7622_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7622 » Version: N/A
Mediatek » Mt7628 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7628_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7628 » Version: N/A
Mediatek » Mt7629 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7629_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7629 » Version: N/A
Mediatek » Mt7915 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7915_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7915 » Version: N/A
Mediatek » Mt7603 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7603_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7603 » Version: N/A
Mediatek » Mt7916 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7916_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7916 » Version: N/A
Mediatek » Mt7986 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7986_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7986 » Version: N/A
Mediatek » Mt7981 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt7981_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7981 » Version: N/A
Mediatek » Mt8518s Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8518s_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8518s » Version: N/A
Mediatek » Mt8532 Firmware » Version: 7.6.6.0
cpe:2.3:o:mediatek:mt8532_firmware:7.6.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt8532 » Version: N/A
Thelinuxfoundation » Yocto » Version: 3.1
cpe:2.3:o:thelinuxfoundation:yocto:3.1:-:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7603 » Version: N/A
Thelinuxfoundation » Yocto » Version: 3.3
cpe:2.3:o:thelinuxfoundation:yocto:3.3:-:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt7603 » Version: N/A

Vulnerability Details : CVE-2022-32659

Exploit prediction scoring system (EPSS) score for CVE-2022-32659

CVSS scores for CVE-2022-32659

CWE ids for CVE-2022-32659

References for CVE-2022-32659

Products affected by CVE-2022-32659