CVE-2022-32663

high-risk

Published 2023-02-06

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.

Do I need to act?

1.2% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (20)

Mt5221 Firmware

Mt7603 Firmware

Mt7613 Firmware

Mt7615 Firmware

Mt7622 Firmware

Mt7628 Firmware

Mt7629 Firmware

Mt7668 Firmware

Mt7902 Firmware

Mt7915 Firmware

Mt7916 Firmware

Mt7921 Firmware

Mt7981 Firmware

Mt7986 Firmware

Mt8167S Firmware

Mt8175 Firmware

Mt8362A Firmware

Mt8365 Firmware

Mt8385 Firmware

Mt8518S Firmware

Affected Vendors

Mediatek

References (2)

Vendor Advisory https://corp.mediatek.com/product-security-bulletin/February-2023

/ 100

high-risk

Severity 26/34 · High

Exploitability 4/34 · Minimal

Exposure 20/34 · Moderate