by Kastro
Paper/Archive/CVE-2022-26437

CVE-2022-26437

MediaTek, Inc. MT2621, MT2625 — In httpclient, there is a possible out of bounds write due to uninitialized data.

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.4.734 × 2014.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WSAP00103831; Issue ID: WSAP00103831.

Affected

ProductAffectedFixed inSource
MT2621, MT2625NBIOT SDK V2.8.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcorp.mediatek.com/product-security-bulletin/August-2022