CVE-2022-32656 - Vulnerability Details

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00134.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

MediaTek, Inc.

MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788

affected

Version	Status	Constraints
`7.6.6.0`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:mediatek:mt5221_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:mediatek:mt7603_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7603:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:mediatek:mt7613_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7613:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:mediatek:mt7615_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:mediatek:mt7622_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:mediatek:mt7628_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7628:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:mediatek:mt7629_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7629:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:mediatek:mt7663_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:mediatek:mt7668_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:mediatek:mt7682_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7682:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:mediatek:mt7686_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7686:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:mediatek:mt7687_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7687:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:mediatek:mt7697_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7697:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:mediatek:mt7902_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:mediatek:mt7915_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:mediatek:mt7916_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:mediatek:mt7921_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:mediatek:mt7933_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:mediatek:mt7981_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:mediatek:mt7986_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:mediatek:mt8167s_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:mediatek:mt8175_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:mediatek:mt8362a_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:mediatek:mt8365_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:mediatek:mt8385_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:mediatek:mt8518s_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:mediatek:mt8532_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:mediatek:mt8695_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:mediatek:mt8696_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:mediatek:mt8788_firmware:7.6.6.0:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Mediatek Subscribe	Mt5221 Subscribe Mt5221 Firmware Subscribe Mt7603 Subscribe Mt7603 Firmware Subscribe Mt7613 Subscribe Mt7613 Firmware Subscribe Mt7615 Subscribe Mt7615 Firmware Subscribe Mt7622 Subscribe Mt7622 Firmware Subscribe Mt7628 Subscribe Mt7628 Firmware Subscribe Mt7629 Subscribe Mt7629 Firmware Subscribe Mt7663 Subscribe Mt7663 Firmware Subscribe Mt7668 Subscribe Mt7668 Firmware Subscribe Mt7682 Subscribe Mt7682 Firmware Subscribe Mt7686 Subscribe Mt7686 Firmware Subscribe Mt7687 Subscribe Mt7687 Firmware Subscribe Mt7697 Subscribe Mt7697 Firmware Subscribe Mt7902 Subscribe Mt7902 Firmware Subscribe Mt7915 Subscribe Mt7915 Firmware Subscribe Mt7916 Subscribe Mt7916 Firmware Subscribe Mt7921 Subscribe Mt7921 Firmware Subscribe Mt7933 Subscribe Mt7933 Firmware Subscribe Mt7981 Subscribe Mt7981 Firmware Subscribe Mt7986 Subscribe Mt7986 Firmware Subscribe Mt8167s Subscribe Mt8167s Firmware Subscribe Mt8175 Subscribe Mt8175 Firmware Subscribe Mt8362a Subscribe Mt8362a Firmware Subscribe Mt8365 Subscribe Mt8365 Firmware Subscribe Mt8385 Subscribe Mt8385 Firmware Subscribe Mt8518s Subscribe Mt8518s Firmware Subscribe Mt8532 Subscribe Mt8532 Firmware Subscribe Mt8695 Subscribe Mt8695 Firmware Subscribe Mt8696 Subscribe Mt8696 Firmware Subscribe Mt8788 Subscribe Mt8788 Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2022-35722	In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://corp.mediatek.com/product-security-bulletin/February-2023

History

Wed, 26 Mar 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: MediaTek

Published: 2023-02-06T00:00:00.000Z

Updated: 2025-03-26T19:56:53.312Z

Reserved: 2022-06-09T00:00:00.000Z

Link: CVE-2022-32656

Vulnrichment

Updated: 2024-08-03T07:46:45.240Z

NVD

Status : Modified

Published: 2023-02-06T20:15:11.157

Modified: 2025-03-26T20:15:16.300

Link: CVE-2022-32656

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-noinfo

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object