Vulnerability · Published Aug 1, 2022 · Assigned by MediaTek
CVE-2022-26437
Critical 9.8
In plain English
A critical-severity security flaw in MT2621, MT2625 from MediaTek, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.5%top 26.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WSAP00103831; Issue ID: WSAP00103831.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT2621, MT2625 | NBIOT SDK V2.8.1 |
References
- https://corp.mediatek.com/product-security-bulletin/August-2022 x_refsource_MISC