CVE-2022-32655

Medium

Description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.

SeverityMedium
CVSS6.7
Exploit probability—
ProductMediatek Mt5221 Firmware
PublishedFeb 6, 2023
First seenFeb 6, 2023
Weakness typeCWE-755CWE-755

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mediatek mt5221_firmware7.6.6.0—
mediatek mt7603_firmware7.6.6.0—
mediatek mt7613_firmware7.6.6.0—
mediatek mt7615_firmware7.6.6.0—
mediatek mt7622_firmware7.6.6.0—
mediatek mt7628_firmware7.6.6.0—
mediatek mt7629_firmware7.6.6.0—
mediatek mt7663_firmware7.6.6.0—
mediatek mt7668_firmware7.6.6.0—
mediatek mt7682_firmware7.6.6.0—
mediatek mt7686_firmware7.6.6.0—
mediatek mt7687_firmware7.6.6.0—
mediatek mt7697_firmware7.6.6.0—
mediatek mt7902_firmware7.6.6.0—
mediatek mt7915_firmware7.6.6.0—
mediatek mt7916_firmware7.6.6.0—
mediatek mt7921_firmware7.6.6.0—
mediatek mt7933_firmware7.6.6.0—
mediatek mt7981_firmware7.6.6.0—
mediatek mt7986_firmware7.6.6.0—
mediatek mt8167s_firmware7.6.6.0—
mediatek mt8175_firmware7.6.6.0—
mediatek mt8362a_firmware7.6.6.0—
mediatek mt8365_firmware7.6.6.0—
mediatek mt8385_firmware7.6.6.0—
mediatek mt8518s_firmware7.6.6.0—
mediatek mt8532_firmware7.6.6.0—
mediatek mt8695_firmware7.6.6.0—
mediatek mt8696_firmware7.6.6.0—
mediatek mt8788_firmware7.6.6.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-32655 · Mediatek Mt5221 Firmware · Dark Radar