{"schemaVersion":3,"id":"CVE-2022-32654","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011.","dates":{"published":"2023-02-06T00:00:00.000Z","modified":"2025-03-26T20:05:56.602Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.7,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00312,"percentile":0.22609,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00312},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00312,"percentile":0.22609}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00312,"percentile":0.22609}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mediatek","product":"mt5221_firmware","name":"mt5221 firmware","label":"mt5221_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt5221"},{"vendor":"mediatek","product":"mt7603_firmware","name":"mt7603 firmware","label":"mt7603_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7603"},{"vendor":"mediatek","product":"mt7613_firmware","name":"mt7613 firmware","label":"mt7613_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7613"},{"vendor":"mediatek","product":"mt7615_firmware","name":"mt7615 firmware","label":"mt7615_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7615"},{"vendor":"mediatek","product":"mt7622_firmware","name":"mt7622 firmware","label":"mt7622_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7622"},{"vendor":"mediatek","product":"mt7628_firmware","name":"mt7628 firmware","label":"mt7628_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7628"},{"vendor":"mediatek","product":"mt7629_firmware","name":"mt7629 firmware","label":"mt7629_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7629"},{"vendor":"mediatek","product":"mt7663_firmware","name":"mt7663 firmware","label":"mt7663_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7663"},{"vendor":"mediatek","product":"mt7668_firmware","name":"mt7668 firmware","label":"mt7668_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7668"},{"vendor":"mediatek","product":"mt7682_firmware","name":"mt7682 firmware","label":"mt7682_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7682"},{"vendor":"mediatek","product":"mt7686_firmware","name":"mt7686 firmware","label":"mt7686_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7686"},{"vendor":"mediatek","product":"mt7687_firmware","name":"mt7687 firmware","label":"mt7687_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7687"},{"vendor":"mediatek","product":"mt7697_firmware","name":"mt7697 firmware","label":"mt7697_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7697"},{"vendor":"mediatek","product":"mt7902_firmware","name":"mt7902 firmware","label":"mt7902_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7902"},{"vendor":"mediatek","product":"mt7915_firmware","name":"mt7915 firmware","label":"mt7915_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7915"},{"vendor":"mediatek","product":"mt7916_firmware","name":"mt7916 firmware","label":"mt7916_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7916"},{"vendor":"mediatek","product":"mt7921_firmware","name":"mt7921 firmware","label":"mt7921_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7921"},{"vendor":"mediatek","product":"mt7933_firmware","name":"mt7933 firmware","label":"mt7933_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7933"},{"vendor":"mediatek","product":"mt7981_firmware","name":"mt7981 firmware","label":"mt7981_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7981"},{"vendor":"mediatek","product":"mt7986_firmware","name":"mt7986 firmware","label":"mt7986_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt7986"},{"vendor":"mediatek","product":"mt8167s_firmware","name":"mt8167s firmware","label":"mt8167s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8167s"},{"vendor":"mediatek","product":"mt8175_firmware","name":"mt8175 firmware","label":"mt8175_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8175"},{"vendor":"mediatek","product":"mt8362a_firmware","name":"mt8362a firmware","label":"mt8362a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8362a"},{"vendor":"mediatek","product":"mt8365_firmware","name":"mt8365 firmware","label":"mt8365_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8365"},{"vendor":"mediatek","product":"mt8385_firmware","name":"mt8385 firmware","label":"mt8385_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8385"},{"vendor":"mediatek","product":"mt8518s_firmware","name":"mt8518s firmware","label":"mt8518s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8518s"},{"vendor":"mediatek","product":"mt8532_firmware","name":"mt8532 firmware","label":"mt8532_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8532"},{"vendor":"mediatek","product":"mt8695_firmware","name":"mt8695 firmware","label":"mt8695_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8695"},{"vendor":"mediatek","product":"mt8696_firmware","name":"mt8696 firmware","label":"mt8696_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8696"},{"vendor":"mediatek","product":"mt8788_firmware","name":"mt8788 firmware","label":"mt8788_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.6.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6.6.0","eol":null,"hubHref":"/vendor/mediatek/mt8788"}],"affectedCount":30,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/February-2023","label":"corp.mediatek.com/product-security-bulletin/February-2023","hostname":"corp.mediatek.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2023-02-06T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-03-26T20:05:56.602Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:51:03.405Z","stale":false,"partial":false}}