High severity · published Feb 6, 2023
CVE-2022-32663
In Wi-Fi driver, there is a possible system crash due to null pointer dereference
7.5
CVSS
1.6%
EPSS
No
On KEV
Description
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mt5221 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7603 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7613 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7615 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7622 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7628 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7629 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7668 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7902 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7915 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7916 Firmware · Mediatek
7.6.6.1 · source: NVD
MF
Mt7921 Firmware · Mediatek
7.6.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32663
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32663
Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/February-2023
More from Mt5221 Firmware
6.7
CVE-2022-32656
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling
6.7
CVE-2022-32655
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling
6.7
CVE-2022-32654
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling