Lucene search

MediaTekCVE-2022-21744

HistoryJul 06, 2022 - 2:15 p.m.

CVE-2022-21744

2022-07-0614:15:17

CWE-787

MediaTek

web.nvd.nist.gov

modem 2g

out-of-bounds write

remote code execution

gprs packet neighbour cell data

pncd

security vulnerability

cve-2022-21744

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.005

Percentile

77.6%

JSON

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626.

Affected configurations

Nvd

Node

mediateklr11Match-

mediateklr12Match-

mediateklr12aMatch-

mediateklr13Match-

mediateklr9Match-

mediateknr15Match-

mediateknr16Match-

AND

mediatekmt2731Match-

mediatekmt2735Match-

mediatekmt6297Match-

mediatekmt6725Match-

mediatekmt6735Match-

mediatekmt6737Match-

mediatekmt6739Match-

mediatekmt6750Match-

mediatekmt6750sMatch-

mediatekmt6755Match-

mediatekmt6757Match-

mediatekmt6757pMatch-

mediatekmt6758Match-

mediatekmt6761Match-

mediatekmt6762Match-

mediatekmt6762dMatch-

mediatekmt6762mMatch-

mediatekmt6763Match-

mediatekmt6765Match-

mediatekmt6765tMatch-

mediatekmt6767Match-

mediatekmt6768Match-

mediatekmt6769Match-

mediatekmt6769tMatch-

mediatekmt6769zMatch-

mediatekmt6771Match-

mediatekmt6775Match-

mediatekmt6779Match-

mediatekmt6781Match-

mediatekmt6783Match-

mediatekmt6785Match-

mediatekmt6785tMatch-

mediatekmt6789Match-

mediatekmt6797Match-

mediatekmt6799Match-

mediatekmt6833Match-

mediatekmt6853Match-

mediatekmt6855Match-

mediatekmt6873Match-

mediatekmt6875Match-

mediatekmt6877Match-

mediatekmt6879Match-

mediatekmt6880Match-

mediatekmt6883Match-

mediatekmt6885Match-

mediatekmt6889Match-

mediatekmt6890Match-

mediatekmt6891Match-

mediatekmt6893Match-

mediatekmt6895Match-

mediatekmt6983Match-

mediatekmt8666Match-

mediatekmt8667Match-

mediatekmt8675Match-

mediatekmt8735aMatch-

mediatekmt8735bMatch-

mediatekmt8765Match-

mediatekmt8766Match-

mediatekmt8768Match-

mediatekmt8771Match-

mediatekmt8781Match-

mediatekmt8786Match-

mediatekmt8788Match-

mediatekmt8789Match-

mediatekmt8791Match-

mediatekmt8797Match-

VendorProductVersionCPE
mediateklr11-cpe:2.3:o:mediatek:lr11:-:*:*:*:*:*:*:*
mediateklr12-cpe:2.3:o:mediatek:lr12:-:*:*:*:*:*:*:*
mediateklr12a-cpe:2.3:o:mediatek:lr12a:-:*:*:*:*:*:*:*
mediateklr13-cpe:2.3:o:mediatek:lr13:-:*:*:*:*:*:*:*
mediateklr9-cpe:2.3:o:mediatek:lr9:-:*:*:*:*:*:*:*
mediateknr15-cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*
mediateknr16-cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*
mediatekmt2731-cpe:2.3:h:mediatek:mt2731:-:*:*:*:*:*:*:*
mediatekmt2735-cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
mediatekmt6297-cpe:2.3:h:mediatek:mt6297:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mediatek	lr11	-	cpe:2.3:o:mediatek:lr11:-:::::::*
mediatek	lr12	-	cpe:2.3:o:mediatek:lr12:-:::::::*
mediatek	lr12a	-	cpe:2.3:o:mediatek:lr12a:-:::::::*
mediatek	lr13	-	cpe:2.3:o:mediatek:lr13:-:::::::*
mediatek	lr9	-	cpe:2.3:o:mediatek:lr9:-:::::::*
mediatek	nr15	-	cpe:2.3:o:mediatek:nr15:-:::::::*
mediatek	nr16	-	cpe:2.3:o:mediatek:nr16:-:::::::*
mediatek	mt2731	-	cpe:2.3:h:mediatek:mt2731:-:::::::*
mediatek	mt2735	-	cpe:2.3:h:mediatek:mt2735:-:::::::*
mediatek	mt6297	-	cpe:2.3:h:mediatek:mt6297:-:::::::*

Rows per page:

1-10 of 731

CNA Affected

[
  {
    "product": "MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6757, MT6757P, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6797, MT6799, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Modem LR9, \nLR11, \nLR12, \nLR12A, \nLR13, \nNR15,\nNR16"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/July-2022

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.005

Percentile

77.6%

JSON

Related for CVE-2022-21744