Out of Bounds Write Vulnerability in MediaTek Wi-Fi Driver
CVE-2022-26444

6.7MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt7603, Mt7610, Mt7612, Mt7613, Mt7615, Mt7620, Mt7622, Mt7628, Mt7629, Mt7915, Mt7916, Mt7986, Mt8981
Vendor
CVE Published:
1 August 2022

What is CVE-2022-26444?

The MediaTek Wi-Fi driver has a vulnerability that results from a missing bounds check, which permits an out-of-bounds write. This flaw could allow an attacker with local access to escalate privileges to system-level execution. The vulnerability does not require user interaction for exploitation, making it a significant risk. Affected products should be promptly updated with the patch provided by MediaTek to mitigate this issue.

Affected Version(s)

MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 7.6.2.3

References

https://corp.mediatek.com/product-security-bulletin/Augus...
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.