Vulnerability

CVE-2022-26458

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032678; Issue ID: ALPS07032678.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

6.7

Severity (Android)

N/A

Chipsets

34

Devices

200

Affected Hardware

NameAlso known asManufacturer
MT6853V/ZA
Dimensity 720
MediaTek
MT6853V/NZA
Dimensity 720
MediaTek
MT6853V/TNZA
Dimensity 800U
MediaTek
MT6853T
Dimensity 800U
MediaTek
MT6873
Dimensity 800
MediaTek
MT6877
Dimensity 900
MediaTek
MT6877V/ZA
Dimensity 900
MediaTek
MT6877
Dimensity 920
MediaTek
MT6877T
Dimensity 920
MediaTek
MT6877V/TZA
Dimensity 920
MediaTek
34 of 34 row(s) shown.

Rows per page

Page 1 of 4

Timeline

Introduced (est):
Jan 1, 2020
Reported:
Unknown
Advisory Published:
Sep 5, 2022
CVE Published:
Sep 6, 2022
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter