Lucene search

[email protected]CVE-2022-21789

HistoryAug 01, 2022 - 2:15 p.m.

CVE-2022-21789

2022-08-0114:15:08

CWE-362

[email protected]

web.nvd.nist.gov

audio

ipi

memory corruption

race condition

local privilege escalation

cve-2022-21789

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478101; Issue ID: ALPS06478101.

Affected configurations

Vulners

NVD

Node

googleandroidRange<11.0

googleandroidRange<12.0

mediatekmt6779

mediatekmt6781

mediatekmt6785

mediatekmt6853

mediatekmt6853t

mediatekmt6873

mediatekmt6875

mediatekmt6877

mediatekmt6879

mediatekmt6883

mediatekmt6885

mediatekmt6889

mediatekmt6891

mediatekmt6893

mediatekmt6895

mediatekmt6983

mediatekmt6985

mediatekmt8791

mediatekmt8797

mediatekmt8798

VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt6779*cpe:2.3:h:mediatek:mt6779:*:*:*:*:*:*:*:*
mediatekmt6781*cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:*
mediatekmt6785*cpe:2.3:h:mediatek:mt6785:*:*:*:*:*:*:*:*
mediatekmt6853*cpe:2.3:h:mediatek:mt6853:*:*:*:*:*:*:*:*
mediatekmt6853t*cpe:2.3:h:mediatek:mt6853t:*:*:*:*:*:*:*:*
mediatekmt6873*cpe:2.3:h:mediatek:mt6873:*:*:*:*:*:*:*:*
mediatekmt6875*cpe:2.3:h:mediatek:mt6875:*:*:*:*:*:*:*:*
mediatekmt6877*cpe:2.3:h:mediatek:mt6877:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	*	cpe:2.3:o:google:android::::::::
google	android	*	cpe:2.3:o:google:android::::::::
mediatek	mt6779	*	cpe:2.3:h:mediatek:mt6779::::::::
mediatek	mt6781	*	cpe:2.3:h:mediatek:mt6781::::::::
mediatek	mt6785	*	cpe:2.3:h:mediatek:mt6785::::::::
mediatek	mt6853	*	cpe:2.3:h:mediatek:mt6853::::::::
mediatek	mt6853t	*	cpe:2.3:h:mediatek:mt6853t::::::::
mediatek	mt6873	*	cpe:2.3:h:mediatek:mt6873::::::::
mediatek	mt6875	*	cpe:2.3:h:mediatek:mt6875::::::::
mediatek	mt6877	*	cpe:2.3:h:mediatek:mt6877::::::::

Rows per page:

1-10 of 221

CNA Affected

[
  {
    "product": "MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8791, MT8797, MT8798",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 11.0, 12.0"
      }
    ]
  }
]