CVE-2022-32663

Published: Feb 6, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.

Affected (22)

Products: Mediatek: Mt5221 Firmware, Mt7603 Firmware, Mt7613 Firmware, Mt7615 Firmware, Mt7622 Firmware, Mt7628 Firmware, Mt7629 Firmware, Mt7668 Firmware, Mt7902 Firmware, Mt7915 Firmware, Mt7916 Firmware, Mt7921 Firmware, Mt7981 Firmware, Mt7986 Firmware, Mt8167s Firmware, Mt8175 Firmware, Mt8362a Firmware, Mt8365 Firmware, Mt8385 Firmware, Mt8518s Firmware, Mt8532 Firmware, Mt8788 Firmware

Mediatek

22 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt5221 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt5221	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7603 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7603	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7613 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7613	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7615 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7615	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7622 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7622	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7628 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7628	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7629 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7629	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7668 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7668	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7902 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7902	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7915 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7915	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7916 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7916	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7921 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7921	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7981 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7981	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt7986 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt7986	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8167s Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8167s	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8175 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8175	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8362a Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8362a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8365 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8365	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8385 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8385	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8518s Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8518s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8532 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8532	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mediatek Mt8788 Firmware	Version 7.6.6.1

Running on/with	Platform Versions
Mediatek Mt8788	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://corp.mediatek.com/product-security-bulletin/February-2023

Source: security@mediatek.com

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/February-2023

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.