Sign-up

ID

VAR-202212-0388


CVE

CVE-2022-32633


TITLE

MediaTek chip Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202212-2445

DESCRIPTION

In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441637; Issue ID: ALPS07441637.

Trust: 1.0

sources: NVD: CVE-2022-32633

IOT TAXONOMY

category:['network device']sub_category:Wi-Fi device

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:googlemodel:androidscope:eqversion:11.0

Trust: 1.0

vendor:googlemodel:androidscope:eqversion:12.0

Trust: 1.0

vendor:yoctoprojectmodel:yoctoscope:eqversion:3.3

Trust: 1.0

vendor:googlemodel:androidscope:eqversion:13.0

Trust: 1.0

vendor:yoctoprojectmodel:yoctoscope:eqversion:3.1

Trust: 1.0

sources: NVD: CVE-2022-32633

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-32633
value: MEDIUM

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2022-32633
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-202212-2445
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2022-32633
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.8
impactScore: 5.9
version: 3.1

Trust: 2.0

sources: CNNVD: CNNVD-202212-2445 // NVD: CVE-2022-32633 // NVD: CVE-2022-32633

PROBLEMTYPE DATA

problemtype:CWE-269

Trust: 1.0

sources: NVD: CVE-2022-32633

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202212-2445

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202212-2445

PATCH

title:MediaTek chip Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=216627

Trust: 0.6

sources: CNNVD: CNNVD-202212-2445

EXTERNAL IDS

db:NVDid:CVE-2022-32633

Trust: 1.7

db:CNNVDid:CNNVD-202212-2445

Trust: 0.6

db:OTHERid:NONE

Trust: 0.1

sources: OTHER: None // CNNVD: CNNVD-202212-2445 // NVD: CVE-2022-32633

REFERENCES

url:https://corp.mediatek.com/product-security-bulletin/december-2022

Trust: 1.6

url:https://cxsecurity.com/cveshow/cve-2022-32633/

Trust: 0.6

url:https://ieeexplore.ieee.org/abstract/document/10769424

Trust: 0.1

sources: OTHER: None // CNNVD: CNNVD-202212-2445 // NVD: CVE-2022-32633

SOURCES

db:OTHERid: -
db:CNNVDid:CNNVD-202212-2445
db:NVDid:CVE-2022-32633

LAST UPDATE DATE

2025-04-24T22:22:40.789000+00:00


SOURCES UPDATE DATE

db:CNNVDid:CNNVD-202212-2445date:2022-12-07T00:00:00
db:NVDid:CVE-2022-32633date:2025-04-24T15:15:47.253

SOURCES RELEASE DATE

db:CNNVDid:CNNVD-202212-2445date:2022-12-05T00:00:00
db:NVDid:CVE-2022-32633date:2022-12-05T15:15:18.567