6.7 Medium

CVE-2022-21778 In vpu, there is a possible information disclosure due to an incorrect bounds check

Description

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421.

Affected products and versions

Product	Affected versions	Fixed in
MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788	Versions not published

Do you use MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788?

Track this CVE Watch MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788 Check my SBOMs

www.cveye.io/en/cve/CVE-2022-21778

Timeline

Published November 8, 2022
Last modified May 1, 2025

References

corp.mediatek.com corp.mediatek.com

Track this CVE