CVE-2021-32468

MediaTek WPS handling in NETGEAR devices enables an out-of-bounds read due to buggy chip firmware. Affected chipsets: MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Version: 7.4.0.0. The CVE is documented with out-of-bounds read as the core flaw...

CVE-2021-35055

Summary: CVE-2021-35055 affects MediaTek-based chips (MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915) used in NETGEAR and other devices. Root cause: mishandling of the WPS (Wi‑Fi Protected Setup) protocol, resulting in an out-of-bounds write . Affected version: 7....

CVE-2022-26445

CVE-2022-26445 concerns the MediaTek WiFi driver, where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privileges with System execution privileges (no user interaction). The issue is tied to the MediaTek WiFi driver and affects listed MediaTek chips (e.g., M...

CVE-2021-41788

CVE-2021-41788 affects MediaTek-based NETGEAR devices (chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) with affected software version 7.4.0.0. The vulnerability stems from mishandling of Wi‑Fi authentication flooding, which can impact availability. Red Hat and NVD entrie...

CVE-2022-26439

CVE-2022-26439 concerns a MediaTek wifi driver issue: a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges required and no user interaction. The vulnerability affects the wifi driver component and is referenced across mul...

CVE-2022-26441

CVE-2022-26441 affects the MediaTek wifi driver across multiple MediaTek chipsets (e.g., MT7603, MT7610/12/13/15, MT7620/22/28/29, MT7915/16, MT7986, MT8981). The root cause is a missing bounds check that enables an out‑of‑bounds write, enabling local escalation to SYSTEM with no user interaction...

CVE-2021-37560

CVE-2021-37560 concerns MediaTek Wi‑Fi SoCs used in NETGEAR devices (and others) where mishandling of the WPS protocol allows an out-of-bounds write. Affected chipsets include MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; affected software version: 7.4.0.0. CVSS...

CVE-2021-37584

CVE-2021-37584 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others) and is caused by mishandling the WPS protocol, leading to an out-of-bounds write. The affected software version is 7.4.0.0. Severity is hig...

CVE-2022-26444

CVE-2022-26444 concerns a missing bounds check in the wifi driver that enables an out-of-bounds write, allowing local escalation to SYSTEM privileges. Multiple connected sources (MediaTek security bulletin, Red Hat advisory, CVE listings) confirm the issue and note the patch GN20220420075 (Issue ...

CVE-2021-37563

CVE-2021-37563 affects MediaTek-based chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others). The vulnerability stems from mishandling of the WPS protocol, resulting in an out-of-bounds write. Affected software version: 7.4.0....

CVE-2022-26438

CVE-2022-26438 affects the wifi driver and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required; exploitation does not require user interaction. Public references indicate a patch ID GN202204...

CVE-2022-26442

The CVE-2022-26442 issue affects MediaTek WiFi driver components, where a missing bounds check enables an out-of-bounds write in the wifi driver. This can lead to local escalation of privilege with SYSTEM-level execution privileges required, and exploitation does not require user interaction. The...

CVE-2021-37561

The CVE-2021-37561 entry describes a vulnerability in MediaTek chipsets (MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915) used in NETGEAR devices where WPS (Wi-Fi Protected Setup) is mishandled. The underlying issue is an out-of-bounds write in the WPS handling pat...

CVE-2021-32469

CVE-2021-32469 concerns MediaTek Wi‑Fi WPS handling in NETGEAR devices and other products. Affected chipsets include MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, with reported out‑of‑bounds read in the WPS process. The vulnerability is tied to the way WPS i...

CVE-2022-26443

The CVE-2022-26443 entry identifies a buffer overrun in the MediaTek Wi‑Fi driver caused by a missing bounds check, enabling local escalation to SYSTEM privileges without user interaction. The available documents confirm the issue is tied to the wifi driver and list Patch ID GN20220420068 (Issue ...

CVE-2021-37562

CVE-2021-37562 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others) and relates to mishandling of the WPS protocol, specifically an out-of-bounds read. Affected software version is 7.4.0.0. CVSS metrics from...

CVE-2021-32467

CVE-2021-32467 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices. Root cause: mishandling of the WPS protocol leading to an out-of-bounds read. Affected software version: 7.4.0.0. Impact per CVSS-3.1: availability imp...

CVE-2022-26440

CVE-2022-26440 concerns a bound-check missing in the MediaTek wifi driver, causing an out-of-bounds write that can enable local escalation to SYSTEM privileges without user interaction. Multiple sources (NVD/Red Hat/NVDC references) tie the issue to a patch identified as GN20220420037 (Issue ID G...