Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66249
HistoryJul 08, 2022 - 12:00 a.m.

Multiple MediaTek chip WLAN driver input validation error vulnerability

2022-07-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
21
mediatek inc
input validation error
wlan driver
boundary checking
out-of-bounds writes
local privilege elevation
semiconductor
mobile devices
smart home applications
wireless connectivity technologies
iot products
user interaction
cnvd

EPSS

0

Percentile

5.1%

MediaTek Inc. is the world’s fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices with MediaTek chips available worldwide each year. A number of MediaTek chips have an input validation error vulnerability in the WLAN driver, which stems from a lack of boundary checking in the WLAN driver and could lead to out-of-bounds writes. An attacker could exploit the vulnerability to perform local privilege elevation without requiring user interaction.

EPSS

0

Percentile

5.1%

Related for CNVD-2022-66249