What’s Vulnerable › Vulnerabilities

CVE-2022-32663

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-06 · updated 2026-06-17
• Weakness: CWE-476

Description

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.

Affected products

• Mediatek Mt5221 Firmware: 7.6.6.1
• Mediatek Mt7603 Firmware: 7.6.6.1
• Mediatek Mt7613 Firmware: 7.6.6.1
• Mediatek Mt7615 Firmware: 7.6.6.1
• Mediatek Mt7622 Firmware: 7.6.6.1
• Mediatek Mt7628 Firmware: 7.6.6.1
• Mediatek Mt7629 Firmware: 7.6.6.1
• Mediatek Mt7668 Firmware: 7.6.6.1
• Mediatek Mt7902 Firmware: 7.6.6.1
• Mediatek Mt7915 Firmware: 7.6.6.1
• Mediatek Mt7916 Firmware: 7.6.6.1
• Mediatek Mt7921 Firmware: 7.6.6.1
• Mediatek Mt7981 Firmware: 7.6.6.1
• Mediatek Mt7986 Firmware: 7.6.6.1
• Mediatek Mt8167S Firmware: 7.6.6.1
• Mediatek Mt8175 Firmware: 7.6.6.1
• Mediatek Mt8362A Firmware: 7.6.6.1
• Mediatek Mt8365 Firmware: 7.6.6.1
• Mediatek Mt8385 Firmware: 7.6.6.1
• Mediatek Mt8518S Firmware: 7.6.6.1
• Mediatek Mt8532 Firmware: 7.6.6.1
• Mediatek Mt8788 Firmware: 7.6.6.1

References

• https://corp.mediatek.com/product-security-bulletin/February-2023
• https://corp.mediatek.com/product-security-bulletin/February-2023

Get alerted when CVE-2022-32663 or the next vulnerability affects your stack