6.7
Medium
CVE-2022-26461 In vow, there is a possible undefined behavior due to an API misuse
Description
In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032604; Issue ID: ALPS07032604.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 | Versions not published |
Other CVEs of MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797
The 6 CVEs of MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 →
CVE-2022-26462
In vow, there is a possible out of bounds read due to an incorrect bounds check
Not rated
CVE-2022-26463
In vow, there is a possible out of bounds read due to an incorrect bounds check
Not rated
CVE-2022-26464
In vow, there is a possible out of bounds write due to an incorrect bounds check
Not rated
CVE-2022-26459
In vow, there is a possible out of bounds read due to an integer overflow
Not rated