Vulnerability

CVE-2022-21745

Component: WIFI
Location: FIRMWARE
In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468872; Issue ID: ALPS06468872.

Impact

Severity (Manufact.)

HIGH

Severity (NIST)

8.8

Severity (Android)

N/A

Chipsets

79

Devices

1348

Affected Hardware

NameAlso known asManufacturer
MT6761V/WE
Helio A20
MediaTek
MT6761V/WAB
Helio A22
MediaTek
MT6761V/WBB
Helio A22
MediaTek
MT6762V/WB
Helio A25
MediaTek
MT6762V/WD
Helio A25
MediaTek
MT6762
Helio P22
MediaTek
MT6765
Helio P35
MediaTek
MT6768
Helio P65
MediaTek
MT6779V/CU
Helio P90
MediaTek
MT6779V/CV
Helio P95
MediaTek
79 of 79 row(s) shown.

Rows per page

Page 1 of 8

Timeline

Introduced (est):
Apr 1, 2018
Reported:
Unknown
Advisory Published:
Jun 6, 2022
CVE Published:
Jun 6, 2022
Android Patch Level:
Jun 2022
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter