Vulnerability

CVE-2022-26447

Component: BLUETOOTH
Location: FIRMWARE
In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: ALPS06784478.

Impact

Severity (Manufact.)

HIGH

Severity (NIST)

9.8

Severity (Android)

N/A

Chipsets

30

Devices

596

Affected Hardware

NameAlso known asManufacturer
MT6580
MediaTek
MT6735P
MediaTek
MT6735M
MediaTek
MT6735
MediaTek
MT6737
MediaTek
MT6737T
MediaTek
MT6739
MediaTek
MT6753
MediaTek
MT6750S
MediaTek
MT6755S
Helio P18
MediaTek
30 of 30 row(s) shown.

Rows per page

Page 1 of 3

Timeline

Introduced (est):
Jan 1, 2015
Reported:
Unknown
Advisory Published:
Sep 5, 2022
CVE Published:
Sep 6, 2022
Android Patch Level:
Sep 2022
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter