Improper input validation in MediaTek products - CVE-2022-32666
Published: July 3, 2023
Vulnerability identifier: #VU77903
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-32666
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to perform service disruption.
The vulnerability exists due to misrepresentation of critical information within Wi-Fi. A local application can perform service disruption.
Affected software
MT7603
MT7613
MT7615
MT7622
MT7628
MT7629
MT7915
MT7916
MT7981
MT7986
MT8365
MT7613
MT7615
MT7622
MT7628
MT7629
MT7915
MT7916
MT7981
MT7986
MT8365
How to mitigate CVE-2022-32666
Install security update from vendor's website.