CVE-2022-26445

CVE-2022-26445: vulnerability in MediaTek, Inc. MT7603, MT7610, MT7612, MT7613…

Published · Updated

Follow this CVE+ Monitor MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420088; Issue ID: GN20220420088.
Affected products
MediaTek, Inc. · MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981
Related CVEs — MediaTek, Inc. MT7603, MT7610, MT7612, MT7613…

In the same product, most dangerous first.

CVE-2022-26444—CVE-2022-26444EPSS 0.3%CVE-2022-26443—CVE-2022-26443EPSS 0.3%CVE-2022-26442—CVE-2022-26442EPSS 0.3%CVE-2022-26441—CVE-2022-26441EPSS 0.3%CVE-2022-26440—CVE-2022-26440EPSS 0.3%CVE-2022-26439—CVE-2022-26439EPSS 0.3%