Vulnerability Description
In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441637; Issue ID: ALPS07441637.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | 11.0 | |
| Yoctoproject | Yocto | 3.1 |
| Mediatek | Mt6580 | - |
| Mediatek | Mt6739 | - |
| Mediatek | Mt6761 | - |
| Mediatek | Mt6762 | - |
| Mediatek | Mt6765 | - |
| Mediatek | Mt6768 | - |
| Mediatek | Mt6769 | - |
| Mediatek | Mt6771 | - |
| Mediatek | Mt6779 | - |
| Mediatek | Mt6781 | - |
| Mediatek | Mt6785 | - |
| Mediatek | Mt6789 | - |
| Mediatek | Mt6833 | - |
| Mediatek | Mt6853 | - |
| Mediatek | Mt6855 | - |
| Mediatek | Mt6873 | - |
| Mediatek | Mt6875 | - |
| Mediatek | Mt6877 | - |
Related Weaknesses (CWE)
References
- https://corp.mediatek.com/product-security-bulletin/December-2022Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/December-2022Vendor Advisory
FAQ
What is CVE-2022-32633?
CVE-2022-32633 is a vulnerability with a CVSS score of 6.7 (MEDIUM). In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...
How severe is CVE-2022-32633?
CVE-2022-32633 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-32633?
Check the references section above for vendor advisories and patch information. Affected products include: Google Android, Yoctoproject Yocto, Mediatek Mt6580, Mediatek Mt6739, Mediatek Mt6761.