CVE-2022-32655

CVE-2022-32655 affects MediaTek Wi‑Fi driver components (e.g., MT5221, MT7603/7613, MT7615, MT7622/7628/7629, MT7663/7668, MT7682/7686/7687, MT7697, MT7902/7915/7916/7921, MT7981/7986, MT8167S, MT8175, MT8362A/8365, MT8385, MT8518S/8532, MT8695/8696/8788). The issue is reported as an undefined be...

CVE-2022-32657

CVE-2022-32657 concerns a vulnerability in the MediaTek Wi‑Fi driver where an undefined behavior arises from incorrect error handling. This could allow local privilege escalation with SYSTEM privileges and does not require user interaction. A patch is identified as GN20220705042 (Issue GN20220705...

CVE-2022-32663

CVE-2022-32663 concerns a vulnerability in a MediaTek Wi‑Fi driver where a null pointer dereference can crash the system, leading to a remote denial of service with no privileges or user interaction required. The CVE documentation (NVD/Red Hat entries) consistently describes the impact as a syste...

CVE-2022-32654

CVE-2022-32654 affects the Wi‑Fi driver, with the root cause described as undefined behavior from incorrect error handling. Impact is local escalation of privileges with System execution privileges required and no user interaction needed. Public details confirm affected devices in MediaTek MTK ch...

CVE-2021-41788

CVE-2021-41788 affects MediaTek-based NETGEAR devices (chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) with affected software version 7.4.0.0. The vulnerability stems from mishandling of Wi‑Fi authentication flooding, which can impact availability. Red Hat and NVD entrie...

CVE-2022-32658

CVE-2022-32658 involves a potential undefined behavior in a MediaTek Wi‑Fi driver caused by incorrect error handling, leading to local privilege escalation with System execution privileges required. Multiple sources (NVD, Red Hat advisory RH:CVE-2022-32658, and other linked entries) corroborate t...

CVE-2021-35055

Summary: CVE-2021-35055 affects MediaTek-based chips (MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915) used in NETGEAR and other devices. Root cause: mishandling of the WPS (Wi‑Fi Protected Setup) protocol, resulting in an out-of-bounds write . Affected version: 7....

CVE-2021-37569

The CVE-2021-37569 entry describes a vulnerability in MediaTek-based devices (notably MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) that affects NETGEAR and other products up to 2.0.2. Root cause: mishandling of IEEE 1905 protocols leading to an out-of-bounds write. Impact is listed as...

CVE-2021-32468

MediaTek WPS handling in NETGEAR devices enables an out-of-bounds read due to buggy chip firmware. Affected chipsets: MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Version: 7.4.0.0. The CVE is documented with out-of-bounds read as the core flaw...

CVE-2021-37572

Summary: CVE-2021-37572 describes a vulnerability in MediaTek chipsets (MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) embedded in NETGEAR devices (and other devices) where IEEE 1905 protocol handling is flawed, resulting in missing authorization. The issue affects affected software ver...

CVE-2022-26445

CVE-2022-26445 concerns the MediaTek WiFi driver, where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privileges with System execution privileges (no user interaction). The issue is tied to the MediaTek WiFi driver and affects listed MediaTek chips (e.g., M...

CVE-2021-37571

CVE-2021-37571 concerns MediaTek Wi‑Fi/IEEE 1905 protocol handling in several MediaTek chipsets (MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) used in NETGEAR devices and others. The vulnerability is described as an out-of-bounds write stemming from mishandling of IEEE 1905 protocols a...

CVE-2021-37584

CVE-2021-37584 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others) and is caused by mishandling the WPS protocol, leading to an out-of-bounds write. The affected software version is 7.4.0.0. Severity is hig...

CVE-2022-26439

CVE-2022-26439 concerns a MediaTek wifi driver issue: a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges required and no user interaction. The vulnerability affects the wifi driver component and is referenced across mul...

CVE-2021-37560

CVE-2021-37560 concerns MediaTek Wi‑Fi SoCs used in NETGEAR devices (and others) where mishandling of the WPS protocol allows an out-of-bounds write. Affected chipsets include MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; affected software version: 7.4.0.0. CVSS...

CVE-2021-37570

MediaTek chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 in NETGEAR devices (and other devices) are affected by CVE-2021-37570 due to mishandling of IEEE 1905 protocols. The vulnerability is described as an out-of-bounds read affecting software version 2.0.2. Connected sources co...

CVE-2022-26438

CVE-2022-26438 affects the wifi driver and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required; exploitation does not require user interaction. Public references indicate a patch ID GN202204...

CVE-2022-26442

The CVE-2022-26442 issue affects MediaTek WiFi driver components, where a missing bounds check enables an out-of-bounds write in the wifi driver. This can lead to local escalation of privilege with SYSTEM-level execution privileges required, and exploitation does not require user interaction. The...

CVE-2021-37563

CVE-2021-37563 affects MediaTek-based chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others). The vulnerability stems from mishandling of the WPS protocol, resulting in an out-of-bounds write. Affected software version: 7.4.0....

CVE-2021-37567

CVE-2021-37567 affects MediaTek chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 (used in NETGEAR and other devices). The vulnerability stems from mishandling IEEE 1905 protocols within these MediaTek components, resulting in an out-of-bounds read. Affected software version is 2.0...

CVE-2022-26441

CVE-2022-26441 affects the MediaTek wifi driver across multiple MediaTek chipsets (e.g., MT7603, MT7610/12/13/15, MT7620/22/28/29, MT7915/16, MT7986, MT8981). The root cause is a missing bounds check that enables an out‑of‑bounds write, enabling local escalation to SYSTEM with no user interaction...

CVE-2022-26444

CVE-2022-26444 concerns a missing bounds check in the wifi driver that enables an out-of-bounds write, allowing local escalation to SYSTEM privileges. Multiple connected sources (MediaTek security bulletin, Red Hat advisory, CVE listings) confirm the issue and note the patch GN20220420075 (Issue ...

CVE-2021-32469

CVE-2021-32469 concerns MediaTek Wi‑Fi WPS handling in NETGEAR devices and other products. Affected chipsets include MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, with reported out‑of‑bounds read in the WPS process. The vulnerability is tied to the way WPS i...

CVE-2021-37561

The CVE-2021-37561 entry describes a vulnerability in MediaTek chipsets (MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915) used in NETGEAR devices where WPS (Wi-Fi Protected Setup) is mishandled. The underlying issue is an out-of-bounds write in the WPS handling pat...

CVE-2021-37565

CVE-2021-37565 affects MediaTek-based NICs in NETGEAR devices (MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915) and associated software version 2.0.2. The root cause is mishandling of IEEE 1905 protocols, resulting in an out-of-bounds read. The publicly reported descriptions confirm the v...

CVE-2021-37583

CVE-2021-37583 affects MediaTek chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and other devices) where IEEE 1905 protocol handling is faulty, causing an out-of-bounds write. The description notes the affected software version 2.0.2 and the root cause as...

CVE-2022-32656

The CVE-2022-32656 entry concerns a local escalation of privilege in MediaTek Wi-Fi drivers. Affected components include MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175,...

CVE-2021-37568

CVE-2021-37568 affects MediaTek chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 and NETGEAR devices (and other devices) where IEEE 1905 protocol handling is flawed, causing an out-of-bounds write. The issue is associated with software version 2.0.2 and is triggered by how the chi...

CVE-2022-26443

The CVE-2022-26443 entry identifies a buffer overrun in the MediaTek Wi‑Fi driver caused by a missing bounds check, enabling local escalation to SYSTEM privileges without user interaction. The available documents confirm the issue is tied to the wifi driver and list Patch ID GN20220420068 (Issue ...

CVE-2021-37564

MediaTek-based NICs in NETGEAR devices (chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 with software version 2.0.2) are affected by CVE-2021-37564 due to mishandling of IEEE 1905 protocols, resulting in an out-of-bounds read. The vulnerability is described across multiple source...

CVE-2021-37562

CVE-2021-37562 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others) and relates to mishandling of the WPS protocol, specifically an out-of-bounds read. Affected software version is 7.4.0.0. CVSS metrics from...

CVE-2022-32666

Technical details (affected products, versions, root cause, and fixes) are not publicly provided in the connected documents; monitor for updates from vendor advisories and CVE records.

CVE-2021-32467

CVE-2021-32467 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices. Root cause: mishandling of the WPS protocol leading to an out-of-bounds read. Affected software version: 7.4.0.0. Impact per CVSS-3.1: availability imp...

CVE-2021-37566

MediaTek IEEE 1905 protocol handling flaw affects MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 chipsets (in NETGEAR and other devices). Affected Software Versions: 2.0.2. Root cause: out-of-bounds write due to mishandling IEEE 1905. Impact is described as high in CVSS t...

CVE-2022-32659

CVE-2022-32659 concerns MediaTek Wi‑Fi driver components with an undefined behavior caused by incorrect error handling. The vulnerability enables local escalation of privilege with SYSTEM execution privileges required, and exploitation does not require user interaction. Public docs indicate a pat...

CVE-2021-41789

CVE-2021-41789 involves a vulnerability in the wifi driver where a missing validation check can cause a system crash, leading to remote denial of service from a proximal attacker without additional privileges. Affected component is the wifi driver (MediaTek context in the referenced sources). The...

CVE-2022-26440

CVE-2022-26440 concerns a bound-check missing in the MediaTek wifi driver, causing an out-of-bounds write that can enable local escalation to SYSTEM privileges without user interaction. Multiple sources (NVD/Red Hat/NVDC references) tie the issue to a patch identified as GN20220420037 (Issue ID G...