Resource exhaustion in MediaTek products - CVE-2022-21757
Published: March 7, 2023
Vulnerability identifier: #VU73095
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-21757
CWE-ID: CWE-400
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to perform service disruption.
The vulnerability exists due to a missing count check within WIFI Firmware. A local application can perform service disruption.
Affected software
MT8185
MT8789
MT8788
MT8786
MT8768
MT8766
MT8675
MT8667
MT8385
MT8365
MT8362A
MT6833
MT8183
MT8175
MT8168
MT8167S
MT6985
MT6983
MT8797
MT6889
MT6885
MT6877
MT6853
MT8789
MT8788
MT8786
MT8768
MT8766
MT8675
MT8667
MT8385
MT8365
MT8362A
MT6833
MT8183
MT8175
MT8168
MT8167S
MT6985
MT6983
MT8797
MT6889
MT6885
MT6877
MT6853
How to mitigate CVE-2022-21757
Install security update from vendor's website.