// For flags

CVE-2022-32617

 

Severity Score

6.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262364; Issue ID: ALPS07262364.

En Typec, existe una posible escritura fuera de límites debido a un cálculo incorrecto del tamaño del búfer. Esto podría provocar una escalada local de privilegios para un atacante que tenga acceso físico al dispositivo, sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS07262364; ID del problema: ALPS07262364.

*Credits: N/A
CVSS Scores
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-06-09 CVE Reserved
  • 2022-11-08 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-131: Incorrect Calculation of Buffer Size
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
11.0
Search vendor "Google" for product "Android" and version "11.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6789
Search vendor "Mediatek" for product "Mt6789"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
11.0
Search vendor "Google" for product "Android" and version "11.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6855
Search vendor "Mediatek" for product "Mt6855"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
11.0
Search vendor "Google" for product "Android" and version "11.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6895
Search vendor "Mediatek" for product "Mt6895"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
11.0
Search vendor "Google" for product "Android" and version "11.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6983
Search vendor "Mediatek" for product "Mt6983"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
11.0
Search vendor "Google" for product "Android" and version "11.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt8798
Search vendor "Mediatek" for product "Mt8798"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
12.0
Search vendor "Google" for product "Android" and version "12.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6789
Search vendor "Mediatek" for product "Mt6789"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
12.0
Search vendor "Google" for product "Android" and version "12.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6855
Search vendor "Mediatek" for product "Mt6855"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
12.0
Search vendor "Google" for product "Android" and version "12.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6895
Search vendor "Mediatek" for product "Mt6895"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
12.0
Search vendor "Google" for product "Android" and version "12.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6983
Search vendor "Mediatek" for product "Mt6983"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
12.0
Search vendor "Google" for product "Android" and version "12.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt8798
Search vendor "Mediatek" for product "Mt8798"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
13.0
Search vendor "Google" for product "Android" and version "13.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6789
Search vendor "Mediatek" for product "Mt6789"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
13.0
Search vendor "Google" for product "Android" and version "13.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6855
Search vendor "Mediatek" for product "Mt6855"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
13.0
Search vendor "Google" for product "Android" and version "13.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6895
Search vendor "Mediatek" for product "Mt6895"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
13.0
Search vendor "Google" for product "Android" and version "13.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt6983
Search vendor "Mediatek" for product "Mt6983"
--
Safe
Google
Search vendor "Google"
Android
Search vendor "Google" for product "Android"
13.0
Search vendor "Google" for product "Android" and version "13.0"
-
Affected
in Mediatek
Search vendor "Mediatek"
Mt8798
Search vendor "Mediatek" for product "Mt8798"
--
Safe