Out of Bounds Write Vulnerability in MediaTek Wifi Driver
CVE-2022-26438

6.7MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt7603, Mt7610, Mt7612, Mt7613, Mt7615, Mt7620, Mt7622, Mt7628, Mt7629, Mt7915, Mt7916, Mt7986, Mt8981
Vendor
CVE Published:
1 August 2022

What is CVE-2022-26438?

An out of bounds write vulnerability exists in the MediaTek wifi driver due to a missing bounds check. This vulnerability may allow a local attacker to escalate privileges without the need for user interaction, potentially leading to unauthorized operations with elevated system execution privileges. It is crucial to apply the necessary patches to mitigate this issue, as the impact could be significant if exploited.

Affected Version(s)

MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 7.6.2.3

References

https://corp.mediatek.com/product-security-bulletin/Augus...
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.