NetSight
medium6.7

CVE-2022-26440

In wifi driver, there is a possible out of bounds write due to a missing bounds check.

Impact

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420037; Issue ID: GN20220420037.

Affected products

VendorProductAffected versions
MediatekMt7603 Firmware
Version 7.6.2.3
MediatekMt7610 Firmware
Version 7.6.2.3
MediatekMt7612 Firmware
Version 7.6.2.3
MediatekMt7613 Firmware
Version 7.6.2.3
MediatekMt7615 Firmware
Version 7.6.2.3
MediatekMt7620 Firmware
Version 7.6.2.3
MediatekMt7622 Firmware
Version 7.6.2.3
MediatekMt7628 Firmware
Version 7.6.2.3
MediatekMt7629 Firmware
Version 7.6.2.3
MediatekMt7915 Firmware
Version 7.6.2.3
MediatekMt7916 Firmware
Version 7.6.2.3
MediatekMt7986 Firmware
Version 7.6.2.3

Weakness classification

References