CVE-2022-21778

EPSS 0.14%
Veröffentlicht 08.11.2022 21:15:09
Zuletzt bearbeitet 01.05.2025 20:15:31
Erkennungen
Login

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 10.0

   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt6785 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6853t Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6891 Version -
   Mediatek ≫ Mt6893 Version -
   Mediatek ≫ Mt8168 Version -
   Mediatek ≫ Mt8175 Version -
   Mediatek ≫ Mt8183 Version -
   Mediatek ≫ Mt8365 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8788 Version -

Google ≫ Android Version 11.0

Google ≫ Android Version 12.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.036

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/November-2022

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-21778

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-21778

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-21778

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-21778